CVE-2024-33698

creationtimestamp| type| source ---|---|--- 2024-09-10 13:24:06+00:00| seen| https://t.me/cvedetector/5222 2024-11-16 15:32:04+00:00| seen| https://t.me/icscert/919 2025-03-11 12:54:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114143898401599829 2026-07-22 05:00:05+00:00| seen|...

CGA-HX92-C57F-J8M9

Bulletin has no description...

CVE-2024-30085

creationtimestamp| type| source ---|---|--- 2024-09-10 09:26:48+00:00| published-proof-of-concept| https://t.me/ptescalator/80 2024-12-22 15:49:04+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3ldvrcv5rgk26 2024-12-24 05:07:55+00:00| seen|...

CVE-2024-44115 Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform

The RFC enabled function module allows a low privileged user to add URLs to any user's workplace favourites. This vulnerability could be utilized to identify usernames and access information about targeted user's workplaces, and nodes. There is low impact on integrity of the application...

CVE-2024-42371

CVE-2024-42371 describes an issue in SAP NetWeaver AS ABAP where an RFC-enabled function module can be abused by a low-privileged user to delete any user’s workplace favourites, potentially exposing usernames and targeted workspace/node information. The impact is listed as low for integrity and a...

Apartment Visitor Management System 1.0 SQL Injection / Code Execution

============================================================================================================================================= | Title : Apartment Visitor Management System 1.0 php code injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser :...

CVE-2024-37285

creationtimestamp| type| source ---|---|--- 2024-09-09 07:57:07+00:00| seen| https://t.me/CyberBulletin/591 2024-09-09 09:27:41+00:00| published-proof-of-concept| https://t.me/HackingInsights/12529 2024-09-09 09:59:46+00:00| seen| https://t.me/CyberBulletin/597 2024-09-09 10:00:11+00:00| seen|...

"@cosme" App fails to restrict custom URL schemes properly

Overview "@cosme" App provided by istyle Inc. provides the function to access a requested URL using Custom URL Scheme. The App does not restrict access to the function properly CWE-939 which may be exploited to direct the App to access any sites. Pantuhong Sorasiri of LAC Co., Ltd. reported this...

CVE-2024-6924

creationtimestamp| type| source ---|---|--- 2024-09-08 08:43:00+00:00| seen| https://t.me/cvedetector/5069...

Security Bulletin: Vulnerability in Airlift aircompressor affects watsonx.data

Summary Airlift aircompressor could allow a local attacker to obtain sensitive information, caused by an out-of-bounds read/write flaw in the decompressor implementations. This can affect watsonx.data. Vulnerability Details CVEID:CVE-2024-36114 DESCRIPTION: airlift aircompressor could allow a loc...

CVE-2024-6840

An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via automountServiceAccountToken: true, resulting in privilege escalation to a service account...

New Supply Chain Attack “Revival Hijack” Risks Massive PyPI Takeovers

JFrog's cybersecurity researchers have identified a new PyPI attack technique called "Revival Hijack," which exploits package deletion policies. Over 22,000 packages are at risk, potentially impacting thousands of users. Stay informed!...

CVE-2024-20439

creationtimestamp| type| source ---|---|--- 2024-09-04 20:15:49+00:00| seen| https://t.me/cvedetector/4823 2024-09-05 06:52:28+00:00| seen| https://t.me/thehackernews/5522 2024-09-05 07:07:50+00:00| seen| https://t.me/CyberBulletin/551 2024-09-05 07:50:52+00:00| seen|...

Indico has a Cross-Site-Scripting during account creation

Impact There is a Cross-Site-Scripting vulnerability during account creation when redirecting after the account has been successfully created. Exploitation requires the user to initiate the account creation process with a maliciously crafted link, and then finalize the signup process. Because of...

CVE-2024-8418

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing...

PT-2024-8805 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A flaw was found in the dynamic tables of Moodle, where capability checks were not enforced, allowing users to retrieve information they did not have permission to access. This issue is...

CVE-2024-6232

creationtimestamp| type| source ---|---|--- 2024-09-03 15:48:09+00:00| seen| https://t.me/cvedetector/4683 2025-03-20 18:20:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8248 2025-07-08 07:10:39+00:00| seen|...

openSUSE Security Advisory (openSUSE-SU-2024:0274-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-45620

A vulnerability was found in the pkcs15-init tool in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. When buffers are partially filled with data, initialized parts of the buffer can be incorrectly accesse...

CVE-2024-45616

A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. The following problems were caused by insufficient control of the response AP...