14295 matches found
CVE-2024-50546
creationtimestamp| type| source ---|---|--- 2024-11-19 18:07:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113510950407133009...
Enhancing Traveler Data Security: Best Practices for Managing Sensitive Info
Protect traveler data with these tips: use VPNs, manage app permissions, and secure travel documents. Travel companies should…...
PT-2024-34312 · Unknown · World Prayer Time
Name of the Vulnerable Software and Affected Versions: World Prayer Time versions n/a through 2.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the web...
mac80211 Information Disclosure
The vulnerability of the mac80211 component in the Linux operating system’s kernel is related to the disclosure of information through the stainfofree function. Exploiting this vulnerability can allow an attacker to gain access to confidential information...
CVE-2024-10486 Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File
The Google for WooCommerce plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and including, 2.8.6. This is due to publicly accessible printphpinformation.php file. This makes it possible for unauthenticated attackers to retrieve information about Webserver and PH...
GHSA-27MF-GHQM-J3J8 aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method
Summary A memory leak can occur when a request produces a MatchInfoError. This was caused by adding an entry to a cache on each request, due to the building of each MatchInfoError producing a unique cache entry. Impact If the user is making use of any middlewares with aiohttp.web then it is...
DEBIAN-CVE-2024-52303
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In versions starting with 3.10.6 and prior to 3.10.11, a memory leak can occur when a request produces a MatchInfoError. This was caused by adding an entry to a cache on each request, due to the building of each...
WordPress Google for WooCommerce plugin <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File vulnerability
Information Disclosure via Publicly Accessible PHP Info File vulnerability discovered by Francesco Carlucci in WordPress Plugin Google for WooCommerce versions = 2.8.6...
PT-2024-35184 · Unknown · Os Pricing Tables
Name of the Vulnerable Software and Affected Versions: OS Pricing Tables versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, which can be used to inject...
PT-2024-8691
Name of the Vulnerable Software and Affected Versions aiohttp versions 3.10.6 through 3.10.10 Description A memory leak can occur when a request produces a MatchInfoError. This issue is caused by adding an entry to a cache on each request, due to the building of each MatchInfoError producing a...
PT-2024-34503
Name of the Vulnerable Software and Affected Versions: AVSCMS version 8.2.0 Description: The issue is related to an arbitrary file upload vulnerability in the /main/fileupload.php component. This allows attackers to execute arbitrary code by uploading a crafted file. Recommendations: For AVSCMS...
RHSA-2024:1867
creationtimestamp| type| source ---|---|--- 2024-11-17 10:25:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113497810108556154 2025-03-06 15:10:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6677 2025-03-26 19:26:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8934...
CVE-2017-13309
In readEncryptedData of ConscryptEngine.java, there is a possible plaintext leak due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2022-20931
creationtimestamp| type| source ---|---|--- 2024-11-15 16:08:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113487833443786916...
PT-2024-34374 · Unknown · Python Food Ordering System
Name of the Vulnerable Software and Affected Versions: python food ordering system version V1.0 Description: The python food ordering system has an unauthorized vulnerability that leads to the leakage of sensitive user information. Attackers can access it through the...
122 million people’s business contact info leaked by data broker
A data broker has confirmed a business contact information database containing 132.8 million records has been leaked online. In February, 2024, a cybercriminal offered the records for sale on a data breach forum claiming the information came from pureincubation.com. Pure Incubation was founded in...
CVE-2024-10396
creationtimestamp| type| source ---|---|--- 2024-11-14 19:34:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113482980334287462 2024-11-14 21:41:09+00:00| seen| https://t.me/cvedetector/11007...
CVE-2024-3502
In lunary-ai/lunary versions up to and including 1.2.5, an information disclosure vulnerability exists where account recovery hashes of users are inadvertently exposed to unauthorized actors. This issue occurs when authenticated users inspect responses from GET /v1/users/me and GET /v1/users/me/o...
PT-2024-34441 · Unknown · Kashipara E-Learning Management System Project
Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A Stored Cross-Site Scripting XSS issue was found in the /admin/school year.php endpoint, specifically via the school year parameter. This allows remote attackers to...
D-Link HTTP GET Request Handler XML Disclosure
The vulnerability of the /xml/info.xml file of the HTTP GET Request Handler component in D-Link DNS-320, DNS-320LW, DNS-325, and DNS-340L microprogrammed software routers is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose...