134 matches found
CVE-2024-49243
creationtimestamp| type| source ---|---|--- 2024-10-18 12:44:21+00:00| seen| https://t.me/cvedetector/8312 2026-04-03 08:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mild3uuswi2k...
CVE-2024-34716
creationtimestamp| type| source ---|---|--- 2024-05-17 12:30:24+00:00| published-proof-of-concept| https://t.me/HackingInsights/602 2024-09-24 01:21:29+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8580 2025-02-05 15:00:53+00:00| published-proof-of-concept|...
CVE-2024-3371 Insufficient validation of external input in Compass may enable MITM attacks
MongoDB Compass may accept and use insufficiently validated input from an untrusted external source. This may cause unintended application behavior, including data disclosure and enabling attackers to impersonate users. This issue affects MongoDB Compass versions 1.35.0 to 1.42.0...
CVE-2024-0243
With the following crawler configuration: python from bs4 import BeautifulSoup as Soup url = "https://example.com" loader = RecursiveUrlLoader url=url, maxdepth=2, extractor=lambda x: Soupx, "html.parser".text docs = loader.load An attacker in control of the contents of https://example.com could...
GHSA-4265-CCF5-PHJ5
creationtimestamp| type| source ---|---|--- 2024-02-21 01:06:50+00:00| seen| https://t.me/ctinow/189065 2024-02-21 14:14:03+00:00| published-proof-of-concept| https://t.me/arpsyndicate/3798 2025-06-16 20:20:39+00:00| seen| https://gist.github.com/safer-bot/8eded6b925c160dc08c1b28d51d6c0c3...
PT-2024-12400 · Wearables · Wearables
Name of the Vulnerable Software and Affected Versions: Wearables affected versions not specified Description: The issue is related to memory corruption in wearables when processing data from AON. Recommendations: At the moment, there is no information about a newer version that contains a fix for...
CVE-2023-40088
creationtimestamp| type| source ---|---|--- 2023-12-05 10:46:49+00:00| seen| https://t.me/truesecator/5162 2023-12-05 12:58:09+00:00| seen| https://t.me/darkcommunityofficial/156 2023-12-06 13:01:09+00:00| published-proof-of-concept| https://t.me/breachdetector/393910 2023-12-06 13:48:05+00:00|...
CVE-2023-22064
creationtimestamp| type| source ---|---|--- 2023-11-15 17:01:59+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5993...
CVE-2023-36563
creationtimestamp| type| source ---|---|--- 2023-10-10 21:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-10-10 22:17:08+00:00| seen| https://t.me/cibsecurity/72007 2023-10-10 22:28:16+00:00| seen| https://t.me/ctinow/142391 2023-10-11 04:00:00+00:00| seen|...
CVE-2021-25371
creationtimestamp| type| source ---|---|--- 2023-06-29 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:34:44+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971843 2025-02-14 21:08:32+00:00| seen| Telegram/rPUBeKEjxriGCQ6M-QAX4jArKG6pjkVh-imtV6AOfQBbDV...
Stimulsoft GmbH Stimulsoft Designer 代码问题漏洞
Stimulsoft GmbH Stimulsoft Designer is a robust product from Stimulsoft that runs on any computer and any platform. Engine, report designer and viewer for generating reports and analyzing data. A security vulnerability exists in Stimulsoft Designer Web version 2023.1.3, which stems fromThe...
CVE-2023-24433
creationtimestamp| type| source ---|---|--- 2023-01-27 00:39:09+00:00| seen| https://t.me/cibsecurity/56970 2025-09-23 15:45:52+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lzjbdt5pol42...
Stored XSS vulnerability when importing RSS Feeds from external source
Description YetiForceCRM allows user create RSS Feeds without purifying the link field of the input data properly from external source. An attacker can take advantage of this vulnerability to perform an XML Injection attack that leads to stored cross-site scripting XSS on the target server. Proof...
CVE-2022-28033
creationtimestamp| type| source ---|---|--- 2022-04-12 20:23:22+00:00| seen| https://t.me/cibsecurity/40659...
Static Code Injection in collectiveaccess/pawtucket2
Description This is with reference to another SSRF report I made https://huntr.dev/bounties/43505ece-7d5e-44b8-a7a3-69bd42d0ad02/ in which the fix was to filter external src from images. Pawtucket2 makes use of the same code as Providence to filter HTML, however it does not include the new fix...
CVE-2021-22899
creationtimestamp| type| source ---|---|--- 2021-04-20 15:25:01+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus12/2021 2021-04-21 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=570 2021-07-29 17:59:02+00:00| seen| https://t.me/RussianOSINT/875...
CVE-2021-20443
IBM Maximo for Civil Infrastructure 7.6.2 includes executable functionality such as a library from a source that is outside of the intended control sphere. IBM X-Force ID: 196619...
UBUNTU-CVE-2020-11986
To be able to analyze gradle projects, the build scripts need to be executed. Apache NetBeans follows this pattern. This causes the code of the build script to be invoked at load time of the project. Apache NetBeans up to and including 12.0 did not request consent from the user for the analysis o...
curl: Insecure Frame (External)
Summary: Insecure Frame External Steps To Reproduce: Vulnerability Details identified an external insecure or misconfigured iframe. Remedy Apply sandboxing in inline frame For untrusted content, avoid the usage of seamless attribute and allow-top-navigation, allow-popups and allow-scripts in...