QNAP Systems Video Station SQL注入漏洞

QNAP Systems Video Station is a video management and playback application from QNAP Systems. A SQL injection vulnerability exists in QNAP Systems Video Station version 5.8.1 2024/02/26 and earlier versions, which stems from the inclusion of a SQL injection vulnerability. An attacker could exploit...

CVE-2024-43425

creationtimestamp| type| source ---|---|--- 2024-08-28 09:02:28+00:00| published-proof-of-concept| Telegram/sV1gHuMmsF6Obkl4pHuEINogRh1QzHPw2lXaflMTbK27AeDb 2024-08-29 09:08:14+00:00| published-proof-of-concept| https://t.me/HackingInsights/11532 2024-08-29 14:20:05+00:00|...

CVE-2024-8181

creationtimestamp| type| source ---|---|--- 2024-08-27 15:43:21+00:00| seen| https://t.me/cvedetector/4243 2024-11-10 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-10 2024-11-29 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabiliti...

CVE-2024-25633 In eLabFTW, if administrators can create users, users can too

eLabFTW is an open source electronic lab notebook for research labs. In an eLabFTW system, one can configure who is allowed to create new user accounts. A vulnerability has been found starting in version 4.4.0 and prior to version 5.0.0 that allows regular users to create new, validated accounts ...

CVE-2024-7339

creationtimestamp| type| source ---|---|--- 2024-08-01 07:03:40+00:00| seen| https://t.me/cvedetector/2206 2024-08-02 18:06:53+00:00| published-proof-of-concept| https://t.me/HackingInsights/8336 2024-08-05 16:30:40+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8172 2024-08-05...

CVE-2024-6396

creationtimestamp| type| source ---|---|--- 2024-07-12 02:41:34+00:00| seen| https://t.me/cvedetector/700 2025-02-01 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-02-01 2025-02-06 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilitie...

mmap unmaintained

The mmap crate is unmaintained as its repository has been archived on Feb 10, 2022. The main alternative seems to be memmap2 crate...

CVE-2024-34331

creationtimestamp| type| source ---|---|--- 2024-05-31 22:33:06+00:00| published-proof-of-concept| https://t.me/cKure/13022 2024-06-05 11:43:02+00:00| published-proof-of-concept| https://t.me/HackingInsights/1636 2024-07-17 19:40:43+00:00| seen| https://t.me/CyberSecurityTechnologies/10635...

CVE-2024-5411

creationtimestamp| type| source ---|---|--- 2024-05-28 13:37:59+00:00| seen| https://t.me/HackingInsights/1004 2025-02-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-15...

CVE-2024-32523

creationtimestamp| type| source ---|---|--- 2024-05-12 04:18:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7280 2024-05-12 06:52:45+00:00| published-proof-of-concept| https://t.me/CNArsenal/2461 2025-02-27 21:02:04+00:00| seen|...

SUSE: Security Advisory (SUSE-SU-2023:2232-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-2559 · Thales · Thales Imperva Securesphere

Name of the Vulnerable Software and Affected Versions: Thales Imperva SecureSphere WAF versions 14.7.0.40 and earlier, without the February 2024 update from the Application Delivery Controller ADC Thales Imperva SecureSphere versions prior to the February 2024 update Description: The issue is...

CVE-2023-7250

creationtimestamp| type| source ---|---|--- 2024-03-18 14:26:11+00:00| seen| https://t.me/ctinow/210543 2024-03-18 14:32:02+00:00| seen| https://t.me/ctinow/210560 2025-02-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09 2026-01-21 13:08:03+00:00| seen|...

CVE-2024-27757

flusity CMS through 2.45 allows tools/addonsmodel.php Gallery Name XSS. The reporter indicates that this product "ceased its development as of February 2024."...

CVE-2024-28851 Elevation of privilege in Snowflake Hive MetaStore Connector Helper script

The Snowflake Hive metastore connector provides an easy way to query Hive-managed data via Snowflake. Snowflake Hive MetaStore Connector has addressed a potential elevation of privilege vulnerability in a helper script for the Hive MetaStore Connector. A malicious insider without admin privileges...

NVIDIA GPU Display Driver - February 2024 - Lenovo Support US

No description provided...

CVE-2019-17270

creationtimestamp| type| source ---|---|--- 2024-03-10 08:41:50+00:00| published-proof-of-concept| https://t.me/ctinow/204144 2024-09-25 16:20:52+00:00| published-proof-of-concept| https://t.me/CNArsenal/3216 2024-09-26 05:02:37+00:00| published-proof-of-concept|...

CVE-2023-28578

creationtimestamp| type| source ---|---|--- 2024-03-04 12:32:00+00:00| seen| https://t.me/ctinow/199191 2025-02-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09...

Summary of Vulnerabilities, Actors & Attacks: February 2024

...

CISA Known Exploited Vulnerability Catalog February 2024

For a detailed CISAs KEV Catalog, download the pdf file here Summary The Known Exploited Vulnerability KEV catalog, maintained by CISA, is the authoritative source of vulnerabilities that have been exploited in the wild. It is recommended that all organizations review and monitor the KEV catalog,...