CVE-2018-9441

In sdpcopyrawdata of sdpdiscovery.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2018-9449

In processservicesearchattrrsp of sdpdiscovery.cc, there is a possible out of bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

SAMSUNG mobile 安全漏洞

SAMSUNG mobile is a cell phone from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG mobile prior to SMR-Dec-2024 Release 1, which stems from improper input validation and allows a local attacker to broadcast a signal to discover Bluetooth on a Galaxy Watch...

PT-2024-33524 · Samsung · Galaxy Watch

Name of the Vulnerable Software and Affected Versions: Settings versions prior to SMR Dec-2024 Release 1 Description: The issue is related to improper input validation in Settings, which allows local attackers to broadcast a signal for discovering Bluetooth on Galaxy Watch. This can be exploited ...

PT-2024-10698 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software name or version is mentioned in the provided descriptions. Description: The issue is related to a possible out of bound read in the process service search attr rsp function of sdp discovery.cc due to a missing bounds chec...

CVE-2021-34630

creationtimestamp| type| source ---|---|--- 2024-12-02 11:23:41+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-34630.yaml...

WordPress Themesflat Addons For Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin themesflat-addons-for-elementor versions = 2.2.2...

CVE-2024-53675

creationtimestamp| type| source ---|---|--- 2024-12-02 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1638/ 2026-08-04 13:00:09+00:00| seen| https://t.me/purpsec/332 2026-08-05 00:00:24+00:00| seen| https://t.me/purpsec/332...

CVE-2024-3848

creationtimestamp| type| source ---|---|--- 2024-11-30 13:48:14+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-3848.yaml...

WordPress Social Sharing Plugin – Sassy Social Share plugin <= 3.3.69 - Reflected Cross-Site Scripting via heateor_mastodon_share Parameter vulnerability

Reflected Cross-Site Scripting via heateormastodonshare Parameter vulnerability discovered by mikemyers in WordPress Plugin Sassy Social Share versions = 3.3.69...

WordPress Wallet for WooCommerce plugin <= 1.5.6 - Authenticated (Subscriber+) Incorrect Conversion between Numeric Types vulnerability

Authenticated Subscriber+ Incorrect Conversion between Numeric Types vulnerability discovered by stealthcopter in WordPress Plugin TeraWallet – For WooCommerce versions = 1.5.6...

Eaton 9PX Insufficiently Protected Credentials (CVE-2018-9279)

An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the user's password. The web page displayed by the appliance contains the password in cleartext. Passwords could be retrieved by browsing the source code of the webpage. This plugin only works with Tenable.ot. Pleas...

WordPress WOOCS – WooCommerce Currency Switcher plugin <= 1.4.2.2 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by mikemyers in WordPress Plugin FOX versions = 1.4.2.2...

WordPress Skt NURCaptcha plugin <= 3.5.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin Skt NURCaptcha versions = 3.5.0...

WordPress FluentSMTP plugin <= 2.2.82 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by Leo in WordPress Plugin FluentSMTP versions = 2.2.82...

WordPress YaDisk Files plugin <= 1.2.5 - Contributor+ Stored XSS via Shortcode vulnerability

Contributor+ Stored XSS via Shortcode vulnerability discovered by WPscan in WordPress Plugin YaDisk Files versions = 1.2.5...

WordPress April's Call Posts plugin <= 2.1.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin April's Call Posts versions = 2.1.1...

WordPress LA-Studio Element Kit for Elementor plugin <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion vulnerability

Authenticated Contributor+ Local File Inclusion vulnerability discovered by WordFence in WordPress Plugin LA-Studio Element Kit for Elementor versions = 1.4.2...

WordPress WP-Orphanage Extended plugin <= 1.2 - Cross-Site Request Forgery to Orphan Account Privilege Escalation vulnerability

Cross-Site Request Forgery to Orphan Account Privilege Escalation vulnerability discovered by SOPROBRO in WordPress Plugin WP-Orphanage Extended versions = 1.2...

CVE-2024-10220 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips, aws-efs-csi-driver, rancher-webhook-fips, argocd-image-updater, kubeflow-pipelines, argocd-image-updater-fips, aws-efs-csi-driver-fips, k8s-device-plugin, local-static-provisioner-fips, rancher-webhook,...