17550 matches found
CVE-2024-32706
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through = 6.4...
CVE-2024-49623
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in hasan movahed Duplicate Title Validate duplicate-title-validate allows Blind SQL Injection.This issue affects Duplicate Title Validate: from n/a through = 1.0...
CVE-2024-13829
creationtimestamp| type| source ---|---|--- 2025-02-05 05:29:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113949630339559126 2025-02-05 06:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfwbklrar2h 2025-02-05 08:29:09+00:00| seen|...
CVE-2024-1643
By knowing an organization's ID, an attacker can join the organization without permission and gain the ability to read and modify all data within that organization. This vulnerability allows unauthorized access and modification of sensitive information, posing a significant security risk. The fla...
CVE-2024-10626
The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteuploadedfile function in all versions up to, and including, 17.7. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2024-10914
A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument name leads to os command...
CVE-2025-1026
creationtimestamp| type| source ---|---|--- 2025-02-05 05:08:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113949546327052981 2025-02-05 05:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfsvrhm2v2h 2025-02-05 06:48:35+00:00| seen|...
CVE-2025-1025
creationtimestamp| type| source ---|---|--- 2025-02-05 05:08:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113949546311391296 2025-02-05 05:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfsvmo2252f 2025-02-05 07:26:56+00:00| seen|...
CVE-2025-1022
creationtimestamp| type| source ---|---|--- 2025-02-05 05:08:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113949546296359039 2025-02-05 05:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfsvjh7k62t 2025-02-05 06:48:35+00:00| seen|...
CVE-2024-45722
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses weak credential mechanism that could allow an attacker to easily calculate MQTT credentials...
CVE-2025-1028
creationtimestamp| type| source ---|---|--- 2025-02-05 03:23:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113949134865705230 2025-02-05 04:15:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfpk5xebn2t 2025-02-05 04:48:30+00:00| seen|...
CVE-2024-51549
Absolute File Traversal vulnerabilities allows access and modification of un-intended resources. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...
CVE-2024-53966
creationtimestamp| type| source ---|---|--- 2025-02-04 23:58:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113948328441304887 2025-02-05 00:16:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfc77uxrg2b 2025-02-05 03:16:22+00:00| seen|...
CVE-2024-53964
creationtimestamp| type| source ---|---|--- 2025-02-04 23:43:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113948269408710544 2025-02-05 00:16:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfc73besc2r 2025-02-05 03:16:24+00:00| seen|...
CVE-2024-53965
creationtimestamp| type| source ---|---|--- 2025-02-04 23:43:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113948269423769801 2025-02-05 00:16:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfc75nigb2p 2025-02-05 03:16:28+00:00| seen|...
CVE-2024-53962
creationtimestamp| type| source ---|---|--- 2025-02-04 23:43:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113948269377814543 2025-02-05 00:16:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfc6wjx3s2r 2025-02-05 03:16:23+00:00| seen|...
CVE-2024-39658
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Salon Booking System Salon booking system allows SQL Injection.This issue affects Salon booking system: from n/a through 10.7...
CVE-2024-48445
creationtimestamp| type| source ---|---|--- 2025-02-04 22:16:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113947928064913968 2025-02-04 23:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhf6s7p3jw2w 2025-02-05 02:23:49+00:00| seen|...
CVE-2024-13722
creationtimestamp| type| source ---|---|--- 2025-02-04 22:07:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113947890915225546 2025-02-04 22:16:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhf3hjuolo2f 2025-02-05 00:45:45+00:00| seen|...
CVE-2024-55948
creationtimestamp| type| source ---|---|--- 2025-02-04 21:11:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113947671170575758 2025-02-04 21:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhey44ijbq27 2025-02-04 22:23:43+00:00| seen|...