17606 matches found
CVE-2024-22301
CVE-2024-22301 affects the WordPress plugin Albo Pretorio On line (versions n/a–4.6.6). Root cause: Exposure of sensitive information to an unauthorized actor. Impact: confidential data disclosure; no publicly documented patch version in provided sources. Advisories from Patchstack/Red Hat/ENISA ...
CVE-2024-0584
creationtimestamp| type| source ---|---|--- 2024-01-23 23:16:24+00:00| seen| https://t.me/ctinow/172382 2024-02-06 08:41:15+00:00| seen| https://t.me/ctinow/179833 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-15...
Apple WebKit Code Execution Vulnerability
Apple WebKit is an open source browser engine developed by Apple. The Apple WebKit code execution vulnerability can be exploited by an attacker to construct a malicious page to lure a victim into visiting it, which will be successfully exploited to execute code on the target system...
formazioneprofessionaleosa.it Improper Access Control vulnerability OBB-3840569
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-23768
CVE-2024-23768 (Dremio) : Dremio before 24.3.1 suffers a path traversal flaw where an authenticated user with no privileges on certain folders plus access to the source and at least one folder can access restricted folders, files, and datasets. Affected versions are 24.0.0–24.3.0, 23.0.0–23.2.3, ...
CVE-2024-22920
swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c...
CVE-2022-47160
The CVE-2022-47160 entry describes an exposure of sensitive information to an unauthorized actor affecting the WordPress plugin Wp Social Login and Register Social Counter (WP Social). Affected component: the WP Social plugin; vulnerable version range: up to 1.9.0 (from n/a through 1.9.0). Root c...
CVE-2024-22920
swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c...
CVE-2024-0580
CVE-2024-0580 affects QSige, part of the IDMSistemas platform. The root cause is omission of user-controlled key authorization in the API, enabling access to sensitive information via the endpoint /qsige.locator/quotePrevious/centers/X, where X can be 1, 2, 3, etc. Documents identify the affected...
SUSE SLED15: xorg-x11-server / xorg-x11-server-Xvfb / xorg-x11-server-extra / etc (SUSE-SU-2024:0109-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0109-1 advisory. Security fixes: - CVE-2023-6816: Fixed heap buffer overflow in DeviceFocusEvent and...
CVE-2024-22548
Summary: CVE-2024-22548 affects FlyCms 1.0, with a Cross Site Scripting (XSS) vulnerability in the system website settings, specifically the website name field. What’s in scope (from provided docs): The vulnerability is described as XSS in FlyCms 1.0. CVSS v3.1 metrics indicate a base score of 5....
CVE-2022-40203
CVE-2022-40203 affects the WordPress plugin AlgolPlus Advanced Dynamic Pricing for WooCommerce (versions
pyGPOAbuse - Partial Python Implementation Of SharpGPOAbuse
Python partial implementation of SharpGPOAbuse by@pkb1s This tool can be used when a controlled account can modify an existing GPO that applies to one or more users & computers. It will create an immediate scheduled task as SYSTEM on the remote computer for computer GPO, or as logged in user for...
CVE-2023-49515
CVE-2023-49515 concerns an insecure permissions vulnerability in TP-Link TC70 and C200 WiFi Camera firmware. The flaw, present in firmware versions 1.3.4 to 1.3.10, enables a physically proximate attacker to disclose sensitive information by connecting to UART pin components due to insecure permi...
CVE-2024-20987
...
CVE-2024-20981
...