CVE-2024-56410 PhpSpreadsheet has Cross-Site Scripting (XSS) vulnerability in custom properties

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 have a cross-site scripting XSS vulnerability in custom properties. The HTML page is generated without clearing custom properties. Versions 3.7.0, 2.3.5, 2.1.6, and 1.29.7...

CVE-2024-55078

creationtimestamp| type| source ---|---|--- 2025-01-03 14:41:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113764946112818435 2025-01-03 15:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3letuzycxso2m 2025-01-03 15:52:52+00:00| seen|...

CVE-2024-9138 Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances

Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability, CVE-2024-9138. This vulnerability involves hard-coded credentials, enabling an authenticated user to escalate privileges and gain root-level access to the system, posing a...

CVE-2024-53841

creationtimestamp| type| source ---|---|--- 2025-01-03 04:09:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113762457450490131 2025-01-03 04:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lesq6ih7q225 2025-01-03 04:42:42+00:00| seen|...

CVE-2024-53840

creationtimestamp| type| source ---|---|--- 2025-01-03 04:09:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113762457436162539 2025-01-03 04:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lesq6getrk2f 2025-01-03 04:42:45+00:00| seen|...

CVE-2024-53840

there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-53835

there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-11624

there is a possible to add apps to bypass VPN due to Undeclared Permission . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-43768

CVE-2024-43768 affects Google Android Skia: in SkDeflate.cpp’s skia_alloc_func there is an out-of-bounds write caused by an integer overflow. This could enable local escalation of privilege with no additional execution privileges and no user interaction required. Remediation: patch updates exist ...

CVE-2024-55540

creationtimestamp| type| source ---|---|--- 2025-01-02 16:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lerhwgfbrv2a 2025-01-02 16:52:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lerjxlaehw2q 2025-01-02 17:36:36+00:00| seen|...

CVE-2024-56413

The CVE-2024-56413 issue affects Acronis Cyber Protect 16 (Windows) prior to build 39169 and is due to missing session invalidation after a user is deleted. This can leave a deleted user’s session active, creating potential access risks. The PT-2025-3276 entry confirms affected versions and recom...

CVE-2022-45830

creationtimestamp| type| source ---|---|--- 2025-01-02 15:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lerele3jke22 2025-01-02 15:56:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lergv4udxs2u 2025-01-02 16:46:15+00:00| seen|...

CVE-2024-56137 MaxKB RCE vulnerability in function library

MaxKB, which stands for Max Knowledge Base, is an open source knowledge base question-answering system based on a large language model and retrieval-augmented generation RAG. Prior to version 1.9.0, a remote command execution vulnerability exists in the module of function library. The vulnerabili...

CVE-2024-56014

creationtimestamp| type| source ---|---|--- 2025-01-02 13:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler5up2vkw2l 2025-01-02 14:42:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lercqljepl2y 2025-01-02 15:05:32+00:00| seen|...

CVE-2024-56264

creationtimestamp| type| source ---|---|--- 2025-01-02 12:21:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2u5k4gw2f 2025-01-02 14:14:58+00:00| seen| https://t.me/cvedetector/14121 2025-01-02 21:08:37+00:00| seen|...

CVE-2024-56261

creationtimestamp| type| source ---|---|--- 2025-01-02 12:21:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2twmim52i 2025-01-02 12:42:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ler3zqh2tq2q 2025-01-02 14:15:11+00:00| seen|...

CVE-2024-37450

creationtimestamp| type| source ---|---|--- 2025-01-02 12:19:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2pkvz7c2a 2025-01-02 17:23:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113759918634643891...

CVE-2024-37274

creationtimestamp| type| source ---|---|--- 2025-01-02 12:18:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2oth57e2m 2025-01-02 16:38:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113759741495519188...

CVE-2023-46309

creationtimestamp| type| source ---|---|--- 2025-01-02 12:16:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2lamniy25 2025-01-02 13:38:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113759032903015004...

CVE-2024-56032

creationtimestamp| type| source ---|---|--- 2025-01-02 10:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3leqttbu3jo25 2025-01-02 11:44:21+00:00| seen| https://t.me/cvedetector/14109...