CVE-2024-51567

upgrademysqlstatus in databases/views.py in CyberPanel aka Cyber Panel before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware which is only for a POST request and using shell metacharacters in the...

webkitgtk: Arbitrary Remote Code Execution

A flaw was found in WebKitGTK. Processing malicious web content may lead to remote code execution. This vulnerability is known to be actively exploited in the wild and was included in the CISA's KEV catalog...

webkitgtk: Arbitrary Remote Code Execution

A flaw was found in WebKitGTK. Processing malicious web content may lead to remote code execution. This vulnerability is known to be actively exploited in the wild and was included in the CISA's KEV catalog...

CVE-2015-2863

creationtimestamp| type| source ---|---|--- 2024-10-27 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-27 2024-11-09 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-09 2025-01-20 00:00:00+00:00| seen| The Shadowserver...

CVE-2024-48396

CVE-2024-48396 affects AIML Chatbot 1.0 (fixed in 2.0). The issue is a Cross Site Scripting (XSS) vulnerability introduced by insufficient sanitization of inputs in the message field, allowing execution of injected HTML/JavaScript. Red Hat and other sources corroborate the XSS flaw and indicate v...

RockyLinux 8 : thunderbird (RLSA-2024:8024)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:8024 advisory. firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 Tenable has extracted the preceding description block directly from the RockyLin...

CVE-2024-20377

creationtimestamp| type| source ---|---|--- 2024-10-24 18:00:07+00:00| exploited| https://t.me/truesecator/6358 2024-10-31 18:51:56+00:00| exploited| https://t.me/icscert/941 2024-11-03 17:33:56+00:00| seen| https://t.me/icscert/943...

CVE-2024-20388

creationtimestamp| type| source ---|---|--- 2024-10-24 18:00:07+00:00| exploited| https://t.me/truesecator/6358 2024-10-31 18:51:56+00:00| exploited| https://t.me/icscert/941 2024-11-03 17:33:56+00:00| seen| https://t.me/icscert/943...

CVE-2024-20387

creationtimestamp| type| source ---|---|--- 2024-10-24 18:00:07+00:00| exploited| https://t.me/truesecator/6358 2024-10-31 18:51:56+00:00| exploited| https://t.me/icscert/941 2024-11-03 17:33:56+00:00| seen| https://t.me/icscert/943...

Cisco Issues Urgent Fix for ASA and FTD Software Vulnerability Under Active Attack

Cisco on Wednesday said it has released updates to address an actively exploited security flaw in its Adaptive Security Appliance ASA that could lead to a denial-of-service DoS condition. The vulnerability, tracked as CVE-2024-20481 CVSS score: 5.8, affects the Remote Access VPN RAVPN service of...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-20481link is external Cisco ASA and FTD Denial-of-Service Vulnerability CVE-2024-37383link is external RoundCube Webmail Cross-Site Scripting XSS Vulnerability...

Fortinet Warns of Critical Vulnerability in FortiManager Under Active Exploitation

Fortinet has confirmed details of a critical security flaw impacting FortiManager that has come under active exploitation in the wild. Tracked as CVE-2024-47575 CVSS score: 9.8, the vulnerability is also known as FortiJump and is rooted in the FortiGate to FortiManager FGFM protocol. "A missing...

CVE-2017-7927

creationtimestamp| type| source ---|---|--- 2024-10-24 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-10-24 2024-10-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-24 2024-10-27 00:00:00+00:00| exploited| The Shadowserver...

CVE-2018-17532

creationtimestamp| type| source ---|---|--- 2024-10-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-24 2024-10-28 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-28 2024-11-02 00:00:00+00:00| exploited| The Shadowserver...

Slackware: Security Advisory (SSA:2024-297-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-20424

creationtimestamp| type| source ---|---|--- 2024-10-23 20:45:19+00:00| seen| https://t.me/cvedetector/8760 2024-10-24 07:49:33+00:00| seen| https://t.me/CyberBulletin/26181 2024-10-24 07:49:34+00:00| seen| https://t.me/CyberBulletin/1246 2024-10-24 18:00:07+00:00| exploited|...

CVE-2024-20412

creationtimestamp| type| source ---|---|--- 2024-10-23 20:45:17+00:00| seen| https://t.me/cvedetector/8758 2024-10-24 07:48:30+00:00| seen| https://t.me/CyberBulletin/1243 2024-10-24 07:48:30+00:00| seen| https://t.me/CyberBulletin/26178 2024-10-24 18:00:07+00:00| exploited|...

CVE-2024-47575

creationtimestamp| type| source ---|---|--- 2024-10-23 16:01:18+00:00| exploited| https://t.me/BleepingComputer/20896 2024-10-23 16:28:14+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus25/2024 2024-10-23 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-10-...

Slackware Linux 15.0 php81 Multiple Vulnerabilities (SSA:2024-297-01)

The version of php81 installed on the remote host is prior to 8.1.30. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-297-01 advisory. New php81 packages are available for Slackware 15.0 to fix security issues. Tenable has extracted the preceding description...

CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a critical security flaw impacting ScienceLogic SL1 to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation as a zero-day. The vulnerability in question, tracked as CVE-2024-9537 CV...