CVE-2024-12678

creationtimestamp| type| source ---|---|--- 2024-12-20 01:55:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113682658072893365 2024-12-20 02:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpcwibgf52z 2024-12-20 04:12:03+00:00| seen|...

CVE-2024-12794

creationtimestamp| type| source ---|---|--- 2024-12-19 18:11:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113680835451609002 2024-12-19 18:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoi4o4kkd2a 2024-12-19 19:50:17+00:00| seen|...

CVE-2024-12791

creationtimestamp| type| source ---|---|--- 2024-12-19 17:36:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113680696928009298 2024-12-19 18:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoi4gdgxw2t 2024-12-19 19:50:18+00:00| seen|...

CVE-2024-12782

creationtimestamp| type| source ---|---|--- 2024-12-19 12:36:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113679517721524504 2024-12-19 13:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldnxdpqclm2m 2024-12-19 14:49:10+00:00| seen|...

CVE-2024-11157

creationtimestamp| type| source ---|---|--- 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1715/ 2024-12-19 20:52:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113681467193394883 2024-12-19 21:15:24+00:00| seen|...

CVE-2024-12831

creationtimestamp| type| source ---|---|--- 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1720/ 2024-12-20 00:26:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113682309309296151 2024-12-20 01:15:45+00:00| seen|...

Medium: apr

Issue Overview: Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APRUSESHMEMSHMGET=1 apr...

CVE-2024-12695

creationtimestamp| type| source ---|---|--- 2024-12-18 21:49:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113676028544090176 2024-12-18 22:16:24+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113676136226017385 2024-12-18 23:19:32+00:00| seen|...

CVE-2024-47810

creationtimestamp| type| source ---|---|--- 2024-12-18 15:59:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113674653378844954 2024-12-18 17:52:38+00:00| seen| https://t.me/cvedetector/13207 2024-12-20 05:45:07+00:00| seen|...

CVE-2024-49576

creationtimestamp| type| source ---|---|--- 2024-12-18 15:59:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113674653393885665 2024-12-18 17:52:37+00:00| seen| https://t.me/cvedetector/13206 2024-12-20 05:45:07+00:00| seen|...

Meta Fined €251 Million for 2018 Data Breach Impacting 29 Million Accounts

Meta Platforms, the parent company of Facebook, Instagram, WhatsApp, and Threads, has been fined €251 million around $263 million for a 2018 data breach that impacted millions of users in the bloc, in what's the latest financial hit the company has taken for flouting stringent privacy laws. The...

Drug Dealers Have Moved on to Social Media

The marketing of illegal drugs on open platforms is “gaining prominence,” authorities note, while the number of drug transactions on the dark web has decreased in recent years...

CVE-2024-12469

creationtimestamp| type| source ---|---|--- 2024-12-17 09:31:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113667467509014864 2024-12-17 09:35:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113667480613404199 2024-12-17 10:10:08+00:00| seen|...

CVE-2024-9624

The WP All Import Pro plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.9.3 due to missing SSRF protection on the pmxicurldownload function. This makes it possible for authenticated attackers, with Administrator-level access and above, to ma...

CVE-2024-9624 WP All Import Pro <= 4.9.3 - Authenticated (Administrator+) Server-Side Request Forgery via File Import

The WP All Import Pro plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.9.3 due to missing SSRF protection on the pmxicurldownload function. This makes it possible for authenticated attackers, with Administrator-level access and above, to ma...

CVE-2024-49775

creationtimestamp| type| source ---|---|--- 2024-12-16 16:08:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113663365166493371 2024-12-19 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-354-04 2024-12-20 08:01:31+00:00| seen|...

BIT-NODE-MIN-2021-22921

Node.js before 16.4.1, 14.17.2, and 12.22.2 is vulnerable to local privilege escalation attacks under certain conditions on Windows platforms. More specifically, improper configuration of permissions in the installation directory allows an attacker to perform two different escalation attacks: PAT...

BIT-NODE-MIN-2022-32223

Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms.This vulnerability can be exploited if the victim has the following dependencies on a Windows machine: OpenSSL has been installed and “C:\Program Files\Common Files\SSL\openssl.cnf”...

CVE-2024-55628

creationtimestamp| type| source ---|---|--- 2024-12-16 12:57:32+00:00| seen| https://t.me/truesecator/6543 2024-12-19 13:01:33+00:00| seen| https://t.me/ptescalator/199 2025-01-06 18:04:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113782729492440784 2025-01-06 18:16:02+00:00| seen|...

CVE-2024-53376

creationtimestamp| type| source ---|---|--- 2024-12-15 22:45:16+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9438 2024-12-16 03:32:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113660390988031437 2024-12-16 05:38:05+00:00| seen| https://t.me/cvedetector/12957...