9518 matches found
CVE-2024-9702
creationtimestamp| type| source ---|---|--- 2025-01-07 05:38:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/338 2025-01-07 06:16:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4ys5rbxq2e 2025-01-07 06:33:54+00:00| seen|...
CVE-2024-12471
creationtimestamp| type| source ---|---|--- 2025-01-07 05:38:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/334 2025-01-07 06:16:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrijmdo2o 2025-01-07 06:18:52+00:00| seen|...
CVE-2024-12439
CVE-2024-12439: WordPress Marketplace Items plugin (up to 1.5.5) is affected by Stored Cross-Site Scripting via the marketplace shortcode due to insufficient input sanitization and output escaping. Exploitation requires authenticated attacker access (Contributor+) and can lead to injected scripts...
CVE-2024-10527
creationtimestamp| type| source ---|---|--- 2025-01-07 05:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4venubgb2m 2025-01-07 16:37:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/451...
CVE-2024-12313
creationtimestamp| type| source ---|---|--- 2025-01-07 04:39:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/327 2025-01-07 05:17:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhhhji425 2025-01-07 05:48:09+00:00| seen|...
CVE-2024-11378 Bizapp for WooCommerce <= 2.0.8 - Reflected Cross-Site Scripting
The Bizapp for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'error' parameter in all versions up to, and including, 2.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...
CVE-2024-12557
creationtimestamp| type| source ---|---|--- 2025-01-07 03:37:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/293 2025-01-07 04:13:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113785123325157140 2025-01-07 04:15:57+00:00| seen|...
CVE-2024-12425
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font...
CVE-2025-21614
A denial of service DoS vulnerability was found in go-git. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server, which triggers resource exhaustion in go-git clients...
CVE-2025-21620
CVE-2025-21620 affects Deno’s fetch() redirect handling: when an Authorization header is sent to one domain and the response redirects to another, the follow-up request preserves the header, potentially leaking it cross-origin. The issue is confirmed in Deno and is mitigated by upgrading to versi...
CVE-2024-48455
An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3.0.0.3800, 3.0.0.3500 and 3.0.0.3329 and Netis Wifi Router MW5360 1.0.1.3442 and 1.0.1.3031 allows a...
CVE-2024-55629
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, TCP streams with TCP urgent data out of band data can lead to Suricata analyzing data differently than the applications at the TCP endpoints, leading to possible...
CVE-2024-55629 Suricata generic detection bypass using TCP urgent support
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, TCP streams with TCP urgent data out of band data can lead to Suricata analyzing data differently than the applications at the TCP endpoints, leading to possible...
CVE-2024-55629 Suricata generic detection bypass using TCP urgent support
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, TCP streams with TCP urgent data out of band data can lead to Suricata analyzing data differently than the applications at the TCP endpoints, leading to possible...
CVE-2024-56760
creationtimestamp| type| source ---|---|--- 2025-01-06 17:16:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3n6lm2gr25 2025-01-06 17:43:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lf3opboajv25 2025-01-06 19:26:40+00:00| seen|...
CVE-2024-55605
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a large input buffer to the tolowercase, touppercase, stripwhitespace, compresswhitespace, dotprefix, headerlowercase, strippseudoheaders, urldecode, or xor...
CVE-2024-56767
In the Linux kernel, the following vulnerability has been resolved: dmaengine: atxdmac: avoid nullprtderef in atxdmacprepdmamemset The atxdmacmemsetcreatedesc may return NULL, which will lead to a null pointer dereference. For example, the len input is error, or the atchan-freedescslist is empty...
CVE-2024-45559
creationtimestamp| type| source ---|---|--- 2025-01-06 11:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2z2uejgp2o 2025-01-06 11:42:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113781225697590487 2025-01-06 12:44:46+00:00| seen|...
CVE-2024-45558
creationtimestamp| type| source ---|---|--- 2025-01-06 11:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2z2ry2ww22 2025-01-06 11:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2z2ry2ww22 2025-01-06 11:42:02+00:00| seen|...