9518 matches found
CVE-2024-33063
Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present...
CVE-2024-33015
Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report...
CVE-2024-11597
Under specific circumstances, insecure permissions in Ivanti Performance Manager before version 2024.3 HF1, 2024.1 HF1, or 2023.3 HF1 allows a local authenticated attacker to achieve local privilege escalation...
CVE-2024-11423
The Ultimate Gift Cards for WooCommerce – Create WooCommerce Gift Cards, Gift Vouchers, Redeem & Manage Digital Gift Coupons. Offer Gift Certificates, Schedule Gift Cards, and Use Advance Coupons With Personalized Templates plugin for WordPress is vulnerable to unauthorized modification of data d...
CVE-2024-31098
Missing Authorization vulnerability in Mr.Ebabi New Order Notification for Woocommerce.This issue affects New Order Notification for Woocommerce: from n/a through 2.0.2...
CVE-2024-57080
A prototype pollution in the lib.install function of vxe-table v4.8.10 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2024-53964
creationtimestamp| type| source ---|---|--- 2025-02-04 23:43:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113948269408710544 2025-02-05 00:16:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfc73besc2r 2025-02-05 03:16:24+00:00| seen|...
CVE-2024-0294
A vulnerability, which was classified as critical, has been found in Totolink LR1200GB 9.1.0u.6619B20230130. Affected by this issue is the function setUssd of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ussd leads to os command injection. The attack may be launched remotely. T...
CVE-2024-0359
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely...
CVE-2024-8884
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause exposure of credentials when attacker has access to application on network over http...
CVE-2024-35677
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes MegaMenu allows PHP Local File Inclusion.This issue affects MegaMenu: from n/a through 2.3.12...
CVE-2024-13722
creationtimestamp| type| source ---|---|--- 2025-02-04 22:07:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113947890915225546 2025-02-04 22:16:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhf3hjuolo2f 2025-02-05 00:45:45+00:00| seen|...
GHSA-2352-252Q-QC82
creationtimestamp| type| source ---|---|--- 2025-02-04 21:11:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113947671170575758...
CVE-2024-56197
creationtimestamp| type| source ---|---|--- 2025-02-04 21:03:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113947638509402541 2025-02-04 21:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhey472ubi2f 2025-02-04 22:23:46+00:00| seen|...
CVE-2025-22601
creationtimestamp| type| source ---|---|--- 2025-02-04 20:57:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113947614990713817 2025-02-04 21:16:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhey4e2h7j2t 2025-02-04 22:23:41+00:00| seen|...
GHSA-3327-6X79-Q396
creationtimestamp| type| source ---|---|--- 2025-02-04 19:33:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113947287785542382...
CVE-2025-24971 OS Command Injection endpoint '/upload/init' parameter 'filename' (RCE) in DumpDrop
DumpDrop is a stupid simple file upload application that provides an interface for dragging and dropping files. An OS Command Injection vulnerability was discovered in the DumbDrop application, /upload/init endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely wh...
CVE-2025-23645
creationtimestamp| type| source ---|---|--- 2025-02-04 15:16:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhedzo4dwy27 2025-02-04 18:54:27+00:00| seen| https://t.me/cvedetector/17210...