CVE-2024-39385

creationtimestamp| type| source ---|---|--- 2024-09-13 11:41:34+00:00| seen| https://t.me/cvedetector/5583 2025-07-17 19:23:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114870205065116436...

CGA-V8RJ-CVFH-R2R4

Bulletin has no description...

CGA-C649-HVVW-H5HG

Bulletin has no description...

CVE-2024-8306

creationtimestamp| type| source ---|---|--- 2024-09-11 17:51:08+00:00| seen| https://t.me/cvedetector/5363 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-02...

CGA-J6WM-HP74-9GXW

Bulletin has no description...

CVE-2024-43470

creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review 2024-09-10 20:06:30+00:00| seen| https://t.me/cvedetector/5291...

CVE-2024-33698

creationtimestamp| type| source ---|---|--- 2024-09-10 13:24:06+00:00| seen| https://t.me/cvedetector/5222 2024-11-16 15:32:04+00:00| seen| https://t.me/icscert/919 2025-03-11 12:54:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114143898401599829 2026-07-22 05:00:05+00:00| seen|...

CGA-HX92-C57F-J8M9

Bulletin has no description...

CVE-2024-30085

creationtimestamp| type| source ---|---|--- 2024-09-10 09:26:48+00:00| published-proof-of-concept| https://t.me/ptescalator/80 2024-12-22 15:49:04+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3ldvrcv5rgk26 2024-12-24 05:07:55+00:00| seen|...

CVE-2024-44115 Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform

The RFC enabled function module allows a low privileged user to add URLs to any user's workplace favourites. This vulnerability could be utilized to identify usernames and access information about targeted user's workplaces, and nodes. There is low impact on integrity of the application...

CVE-2024-42371

CVE-2024-42371 describes an issue in SAP NetWeaver AS ABAP where an RFC-enabled function module can be abused by a low-privileged user to delete any user’s workplace favourites, potentially exposing usernames and targeted workspace/node information. The impact is listed as low for integrity and a...

Apartment Visitor Management System 1.0 SQL Injection / Code Execution

============================================================================================================================================= | Title : Apartment Visitor Management System 1.0 php code injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser :...

CVE-2024-37285

creationtimestamp| type| source ---|---|--- 2024-09-09 07:57:07+00:00| seen| https://t.me/CyberBulletin/591 2024-09-09 09:27:41+00:00| published-proof-of-concept| https://t.me/HackingInsights/12529 2024-09-09 09:59:46+00:00| seen| https://t.me/CyberBulletin/597 2024-09-09 10:00:11+00:00| seen|...

"@cosme" App fails to restrict custom URL schemes properly

Overview "@cosme" App provided by istyle Inc. provides the function to access a requested URL using Custom URL Scheme. The App does not restrict access to the function properly CWE-939 which may be exploited to direct the App to access any sites. Pantuhong Sorasiri of LAC Co., Ltd. reported this...

CVE-2024-6924

creationtimestamp| type| source ---|---|--- 2024-09-08 08:43:00+00:00| seen| https://t.me/cvedetector/5069...

Security Bulletin: Vulnerability in Airlift aircompressor affects watsonx.data

Summary Airlift aircompressor could allow a local attacker to obtain sensitive information, caused by an out-of-bounds read/write flaw in the decompressor implementations. This can affect watsonx.data. Vulnerability Details CVEID:CVE-2024-36114 DESCRIPTION: airlift aircompressor could allow a loc...

CVE-2024-6840

An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via automountServiceAccountToken: true, resulting in privilege escalation to a service account...

New Supply Chain Attack “Revival Hijack” Risks Massive PyPI Takeovers

JFrog's cybersecurity researchers have identified a new PyPI attack technique called "Revival Hijack," which exploits package deletion policies. Over 22,000 packages are at risk, potentially impacting thousands of users. Stay informed!...

CVE-2024-20439

creationtimestamp| type| source ---|---|--- 2024-09-04 20:15:49+00:00| seen| https://t.me/cvedetector/4823 2024-09-05 06:52:28+00:00| seen| https://t.me/thehackernews/5522 2024-09-05 07:07:50+00:00| seen| https://t.me/CyberBulletin/551 2024-09-05 07:50:52+00:00| seen|...

Indico has a Cross-Site-Scripting during account creation

Impact There is a Cross-Site-Scripting vulnerability during account creation when redirecting after the account has been successfully created. Exploitation requires the user to initiate the account creation process with a maliciously crafted link, and then finalize the signup process. Because of...