CVE-2024-56030

creationtimestamp| type| source ---|---|--- 2025-01-02 10:15:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3leqtt7fzi625 2025-01-02 10:42:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3leqvcuo5hj2q 2025-01-02 11:44:21+00:00| seen|...

CVE-2024-13092 code-projects Job Recruitment Job Post search_ajax.php sql injection

A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. This vulnerability affects unknown code of the file /parse/calljob/searchajax.php of the component Job Post Handler. The manipulation of the argument n leads to sql injection. The attack can be initiated...

CVE-2024-12595

creationtimestamp| type| source ---|---|--- 2025-01-02 06:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3leqgfaacn52m 2025-01-02 06:47:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3leqi6btdre2q 2025-01-02 08:23:27+00:00| seen|...

CVE-2024-56826

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opjdecompress utility. This can lead to an application crash or other undefined behavior...

CVE-2024-23418

creationtimestamp| type| source ---|---|--- 2025-01-01 00:18:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lenbxr5nuu2i...

CVE-2024-23404

creationtimestamp| type| source ---|---|--- 2025-01-01 00:17:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lenbworkqv25...

CVE-2024-56803

Ghostty is a cross‑platform terminal emulator. In version 1.0.0, it improperly handles a specific window-title escape sequence, allowing an attacker to modify the window title and then insert it back into the command line, potentially enabling arbitrary command execution when a user views a file ...

CVE-2024-13074

creationtimestamp| type| source ---|---|--- 2024-12-31 17:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lemkdkrkxs25 2024-12-31 18:44:01+00:00| seen| https://t.me/cvedetector/14052...

CVE-2024-56802

creationtimestamp| type| source ---|---|--- 2024-12-31 15:17:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113748100084170494 2024-12-31 16:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lemgzfyxnj2e 2024-12-31 17:53:43+00:00| seen|...

CVE-2024-56211

creationtimestamp| type| source ---|---|--- 2024-12-31 10:05:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113746873107045238 2024-12-31 12:02:02+00:00| seen| https://t.me/cvedetector/13981...

CVE-2024-13067

creationtimestamp| type| source ---|---|--- 2024-12-31 09:07:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113746644001441615 2024-12-31 11:11:44+00:00| seen| https://t.me/cvedetector/13973...

GHSA-VJP8-2WGG-P734

creationtimestamp| type| source ---|---|--- 2024-12-30 18:31:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113743201037683692...

CVE-2024-56801 Tasklists has Blind SQL Injection in /ajax/reorder.php

Tasklists provides plugin tasklists for GLPI. Versions prior to 2.0.4 have a blind SQL injection vulnerability. Version 2.0.4 contains a patch for the vulnerability...

CVE-2024-12836 Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability

Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to exploit this vulnerability in that the...

CVE-2024-47919

Tiki Wiki CMS – CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...

CVE-2024-47923 Mashov – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Mashov – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-13031

creationtimestamp| type| source ---|---|--- 2024-12-30 00:54:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113739043756073271 2024-12-30 03:25:20+00:00| seen| https://t.me/cvedetector/13911...

CVE-2024-13021

creationtimestamp| type| source ---|---|--- 2024-12-29 20:15:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lehthiji6o22 2024-12-29 21:34:19+00:00| seen| https://t.me/cvedetector/13904 2025-02-01 21:26:34+00:00| published-proof-of-concept|...

CVE-2024-56672

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix UAF in blkcgunpinonline blkcgunpinonline walks up the blkcg hierarchy putting the online pin. To walk up, it uses blkcgparentblkcg but it was calling that after blkcgdestroyblkgsblkcg which could free the blkcg,...

CVE-2024-53166

In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix bfqq uaf in bfqlimitdepth Set new allocated bfqq to bic or remove freed bfqq from bic are both protected by bfqd-lock, however bfqlimitdepth is deferencing bfqq from bic without the lock, this can lead to UAF if t...