CVE-2024-12219

CVE-2024-12219 affects the WordPress plugin Stop Registration Spam, up to version 1.23. It enables Cross-Site Request Forgery due to missing/incorrect nonce validation, allowing unauthenticated attackers to trigger actions that can inject script if a site admin is fooled. The vulnerability was ad...

CVE-2024-55919

Improper input validation on generic SSO login...

Welcome and About GeoServer pages communicate version and revision information

Impact The welcome and about page includes version and revision information about the software in use including library and components used. This information is sensitive from a security point of view because it allows software used by the server to be easily identified. Proof of Concept 1. Welco...

gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet

A flaw was found in the Vorbis decoder in the GStreamer library. Processing a specially crafted input file can cause a stack-based buffer overflow in the Vorbis decoder due to improper input validation, resulting in unexpected behavior or, most likely, an application crash...

gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet

A flaw was found in the Vorbis decoder in the GStreamer library. Processing a specially crafted input file can cause a stack-based buffer overflow in the Vorbis decoder due to improper input validation, resulting in unexpected behavior or, most likely, an application crash...

gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet

A flaw was found in the Vorbis decoder in the GStreamer library. Processing a specially crafted input file can cause a stack-based buffer overflow in the Vorbis decoder due to improper input validation, resulting in unexpected behavior or, most likely, an application crash...

CVE-2024-54440

creationtimestamp| type| source ---|---|--- 2024-12-16 17:51:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113663769253195189...

CVE-2024-54402

creationtimestamp| type| source ---|---|--- 2024-12-16 15:51:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113663296790960840...

CVE-2024-54367

Deserialization of Untrusted Data vulnerability in Ultimate Member ForumWP forumwp allows Object Injection.This issue affects ForumWP: from n/a through = 2.1.0...

CVE-2024-54352

creationtimestamp| type| source ---|---|--- 2024-12-16 14:21:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113662942507679802...

Firmware Security: Identifying Risks to Implement Best Cybersecurity Practices

Find out the key security risks of firmware security: Identify threats, and learn best practices and protection methods…...

CVE-2024-48872

creationtimestamp| type| source ---|---|--- 2024-12-16 08:13:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113661496706625347 2024-12-16 09:49:05+00:00| seen| https://t.me/cvedetector/12977...

CVE-2024-11841

creationtimestamp| type| source ---|---|--- 2024-12-16 06:04:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113660989239338784 2024-12-16 08:08:46+00:00| seen| https://t.me/cvedetector/12966...

CVE-2024-56083

creationtimestamp| type| source ---|---|--- 2024-12-16 02:21:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113660113940700020 2024-12-16 04:47:55+00:00| seen| https://t.me/cvedetector/12956...

CVE-2024-56084

An issue was discovered in Logpoint UniversalNormalizer before 5.7.0. Authenticated users can inject payloads while creating Universal Normalizer. These are executed, leading to Remote Code Execution...

CVE-2024-8798

creationtimestamp| type| source ---|---|--- 2024-12-15 23:27:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113659427755343076 2024-12-16 02:17:24+00:00| seen| https://t.me/cvedetector/12955 2024-12-16 06:29:33+00:00| seen|...

CVE-2024-11858

creationtimestamp| type| source ---|---|--- 2024-12-15 14:04:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113657213753838280 2024-12-15 16:15:40+00:00| seen| https://t.me/cvedetector/12954...

CVE-2024-55970

File Manager in Syncfusion Essential Studio for ASP.NET MVC before 27.1.55 has a traversal issue that is related to the request parameter, aka I644734...

Exploit for Path Traversal in Grafana

Automated Exploit Tool for Grafana CVE-2021-43798 !Previewi...

CVE-2024-11884

creationtimestamp| type| source ---|---|--- 2024-12-14 05:33:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113649544092584001 2024-12-14 06:49:47+00:00| seen| https://t.me/cvedetector/12922...