CVE-2024-45546

Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space...

CVE-2024-33059

Memory corruption while processing frame command IOCTL calls...

CVE-2024-45559 Buffer Over-read in Automotive OS Platform

Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend...

GHSA-C797-JX9V-F674

creationtimestamp| type| source ---|---|--- 2025-01-06 06:40:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/149...

CVE-2024-11849 Pods – Custom Content Types and Fields < 3.2.8.1 - Admin+ Stored XSS

The Pods WordPress plugin before 3.2.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-20146

In wlan STA driver, there is a possible out of bounds write due to improper input validation. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389496 / ALPS09137491; Issue I...

CVE-2024-20144

In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09167056;...

CVE-2024-48456

An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3.0.0.3800, 3.0.0.3500 and 3.0.0.3329 and Netis Wifi Router MW5360 1.0.1.3442 and 1.0.1.3031 allows a...

CVE-2024-48455

CVE-2024-48455 affects multiple Netis routers (e.g., NX10, NC65/NC63/NC21, MW5360) with a information disclosure vulnerability in the web component skk_get.cgi. An unauthenticated remote attacker can obtain sensitive configuration details via the mode_name and wl_link parameters. Connected docume...

CVE-2024-51111

CVE-2024-51111 is a Cross-Site Scripting (XSS) vulnerability affecting Pnetlab version 5.3.11. The issue enables injection of malicious scripts into web pages, which execute in the victim’s browser context. Public sources consistently describe XSS in Pnetlab 5.3.11 but do not provide concrete exp...

CVE-2024-13139

creationtimestamp| type| source ---|---|--- 2025-01-05 11:05:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113775419724463486 2025-01-05 11:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3leyikufl2q2k 2025-01-05 11:47:47+00:00| seen|...

CVE-2024-13137

creationtimestamp| type| source ---|---|--- 2025-01-05 10:04:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113775181358738152 2025-01-05 10:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3leyf7gmmhd2o 2025-01-05 10:47:43+00:00| seen|...

CVE-2024-13130

creationtimestamp| type| source ---|---|--- 2025-01-05 01:03:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113773053753439191 2025-01-05 01:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lexgzrxokf25 2025-01-05 03:18:01+00:00| seen|...

CVE-2025-0206

creationtimestamp| type| source ---|---|--- 2025-01-04 12:05:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113769994809964162 2025-01-04 12:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lew3hgtme72l 2025-01-04 12:42:24+00:00| seen|...

CVE-2024-12279

creationtimestamp| type| source ---|---|--- 2025-01-04 11:21:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113769818823146560 2025-01-04 12:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lew3hbl2km2a 2025-01-04 12:42:25+00:00| seen|...

CVE-2024-10932

creationtimestamp| type| source ---|---|--- 2025-01-04 07:26:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113768895220327215 2025-01-04 09:44:29+00:00| seen| https://t.me/cvedetector/14268...

CVE-2025-0203

creationtimestamp| type| source ---|---|--- 2025-01-04 07:01:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113768796544207117 2025-01-04 08:54:15+00:00| seen| https://t.me/cvedetector/14263...

CVE-2025-0196

creationtimestamp| type| source ---|---|--- 2025-01-03 19:08:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113765993265708846 2025-01-03 21:12:12+00:00| seen| https://t.me/cvedetector/14241 2025-09-03 13:30:06+00:00| seen| MISP/dd71e3c5-20f7-409a-8bcc-8df3cd8022a7...

GHSA-WV23-996V-Q229

creationtimestamp| type| source ---|---|--- 2025-01-03 17:27:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113765598049117930...

CVE-2024-56412 PhpSpreadsheet vulnerable to bypass of the XSS sanitizer using the javascript protocol and special characters

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 are vulnerable to bypass of the cross-site scripting sanitizer using the javascript protocol and special characters. An attacker can use special characters, so that the...