4518 matches found
CVE-2024-23656
creationtimestamp| type| source ---|---|--- 2024-01-25 21:26:45+00:00| seen| https://t.me/ctinow/173803 2024-02-01 03:16:27+00:00| seen| https://t.me/ctinow/177280...
CVE-2023-33758
creationtimestamp| type| source ---|---|--- 2024-01-25 09:26:28+00:00| seen| https://t.me/ctinow/173337 2024-01-26 15:43:12+00:00| seen| https://t.me/arpsyndicate/2989 2024-01-31 23:16:59+00:00| seen| https://t.me/ctinow/177171 2024-02-18 13:41:44+00:00| seen| https://t.me/ctinow/187246 2025-06-2...
PT-2024-12514 · Solax · Solax Pocket Wifi
Name of the Vulnerable Software and Affected Versions: SolaX Pocket WiFi versions 3 through 3.001.02 Description: An issue was discovered where authentication for the web interface is completed via an unauthenticated WiFi AP. The administrative password for the web interface has a default passwor...
CVE-2024-0782: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic. This vulnerability affects unknown code of the file pass-profile.php. The manipulation of the argument First Name/Last Name/User Name leads to cross site scripting. The attack can be...
Canadian Man Stuck in Triangle of E-Commerce Fraud
A Canadian man who says hes been falsely charged with orchestrating a complex e-commerce scam is seeking to clear his name. His case appears to involve "triangulation fraud," which occurs when a consumer purchases something online -- from a seller on Amazon or eBay, for example -- but the seller...
PT-2024-3386
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the bio first folio function in the Linux kernel's block subsystem, which can cause a NULL pointer dereference when the bio contains no data. This can lead to a...
CVE-2023-48248
creationtimestamp| type| source ---|---|--- 2024-01-10 12:21:59+00:00| seen| https://t.me/ctinow/165742 2024-01-28 10:26:56+00:00| seen| https://t.me/ctinow/174888...
CVE-2023-49238
In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installation in certain installation scenarios because of a non-unique initial system user password. Although this password must be changed upon the first login, it is possible that an attacker logs in befor...
CVE-2024-21650
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulnerable to a remote code execution RCE attack through its user registration feature. This issue allows an attacker to execute arbitrary code by crafting malicious payloads in the...
Webcam redirection in double hop is not working
Webcam is not working anymore in a double hop scenario. If the first hop VDA is 1912CU3 webcam redirects fine. However if first hop VDA is CVAD 1912 CU8 VDA then webcam redirection fails. With https://webcamtests.com/ when clicking on "Test my cam" an error is seen. "Your webcam is being used or...
Low: vim
Issue Overview: Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive :s call causes free-ing of memory...
CVE-2024-21650: Improper Neutralization of Directives in Dynamically Evaluated Code
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulnerable to a remote code execution RCE attack through its user registration feature. This issue allows an attacker to execute arbitrary code by crafting malicious payloads in the...
Low: vim
Issue Overview: Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive :s call causes free-ing of memory...
CVE-2024-0266
A vulnerability classified as problematic has been found in Project Worlds Online Lawyer Management System 1.0. Affected is an unknown function of the component User Registration. The manipulation of the argument First Name leads to cross site scripting. It is possible to launch the attack...
CVE-2024-0266: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in Project Worlds Online Lawyer Management System 1.0. Affected is an unknown function of the component User Registration. The manipulation of the argument First Name leads to cross site scripting. It is possible to launch the attack...
Online Lawyer Management System Cross-Site Script Vulnerabilities
Online Lawyer Management System is an online lawyer management system. Online Lawyer Management System version 1.0 suffers from a cross-site scripting vulnerability, which stems from the lack of effective filtering and escaping of user-supplied data in the parameter First Name in the component Us...
CVE-2023-39853
creationtimestamp| type| source ---|---|--- 2024-01-06 05:31:41+00:00| seen| https://t.me/ctinow/163819 2024-01-11 17:17:11+00:00| seen| https://t.me/ctinow/166653 2024-01-25 00:21:22+00:00| seen| https://t.me/ctinow/173180...
PT-2024-15426
Name of the Vulnerable Software and Affected Versions Project Worlds Online Lawyer Management System version 1.0 Description A vulnerability has been found in the User Registration component of the system. The manipulation of the First Name argument leads to cross-site scripting. It is possible t...
Hospital Management System Cross-site Scripting Vulnerability (CNVD-2026-32778)
Hospital Management System is a hospital management system developed by PHPGurukul Company, based on PHP and MySQL. The Hospital Management System has a cross-site scripting vulnerability. This vulnerability stems from the parameter “First Name” in the file registration.php, which lacks effective...