Lucene search
+L

21070 matches found

OSV
OSV
added 2024/07/19 12:15 p.m.9 views

CVE-2024-37066

A command injection vulnerability exists in Wyze V4 Pro firmware versions before 4.50.4.9222, which allows attackers to execute arbitrary commands over Bluetooth as root during the camera setup process...

8.8CVSS6AI score0.01844EPSS
SaveExploits1References2
NVD
NVD
added 2024/07/19 12:15 p.m.26 views

CVE-2024-37066

A command injection vulnerability exists in Wyze V4 Pro firmware versions before 4.50.4.9222, which allows attackers to execute arbitrary commands over Bluetooth as root during the camera setup process...

8.8CVSS0.01844EPSS
SaveExploits1References2
CVE
CVE
added 2024/07/19 12:05 p.m.95 views

CVE-2024-37066

Summary: CVE-2024-37066 affects Wyze V4 Pro firmware prior to 4.50.4.9222. The flaw enables an attacker to inject and execute arbitrary commands as root over Bluetooth during the camera setup process. Affected component: Wyze V4 Pro firmware (pre-4.50.4.9222). Root cause/impact: command injection...

8.8CVSS8.3AI score0.01844EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/19 12:05 p.m.10 views

CVE-2024-37066

A command injection vulnerability exists in Wyze V4 Pro firmware versions before 4.50.4.9222, which allows attackers to execute arbitrary commands over Bluetooth as root during the camera setup process...

6.8CVSS8.3AI score0.01844EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/07/19 12:05 p.m.29 views

CVE-2024-37066

A command injection vulnerability exists in Wyze V4 Pro firmware versions before 4.50.4.9222, which allows attackers to execute arbitrary commands over Bluetooth as root during the camera setup process...

6.8CVSS0.01844EPSS
SaveExploits1References2
The Hacker News
The Hacker News
added 2024/07/19 9:29 a.m.21 views

Pro-Houthi Group Targets Yemen Aid Organizations with Android Spyware

A suspected pro-Houthi threat group targeted at least three humanitarian organizations in Yemen with Android spyware designed to harvest sensitive information. These attacks, attributed to an activity cluster codenamed OilAlpha, entail a new set of malicious mobile apps that come with their own...

6.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/07/19 12:00 a.m.9 views

PT-2024-27282 · Wyze · Wyze V4 Pro

Name of the Vulnerable Software and Affected Versions: Wyze V4 Pro firmware versions prior to 4.50.4.9222 Description: A command injection issue exists, allowing attackers to execute arbitrary commands over Bluetooth as root during the camera setup process. Recommendations: For Wyze V4 Pro firmwa...

8.8CVSS8.7AI score0.01844EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2024/07/18 2:03 a.m.9 views

CVE-2024-6175 Booking Ultra Pro <= 1.1.13 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Updates

The Booking Ultra Pro Appointments Booking Calendar Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the multiple functions called via AJAX like savefieldssettings, bupdeleteuseravatar, bupcropavataruserprofileimage, and more in a...

5.4CVSS5.9AI score0.00298EPSS
SaveExploits0References4
CNVD
CNVD
added 2024/07/18 12:00 a.m.16 views

Tenda AX2 Pro Code Execution Vulnerability

Tenda AX2 Pro is a home user designed entry-level Gigabit Wi-Fi 6 router from Tenda China. A code execution vulnerability exists in Tenda AX2 Pro version V16.03.29.48, which can be exploited by an attacker to execute arbitrary code via the Routing feature...

9.8CVSS7.9AI score0.00658EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/07/17 2:03 p.m.9 views

WordPress Booking Ultra Pro plugin <= 1.1.13 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Updates vulnerability

Missing Authorization to Authenticated Subscriber+ Plugin Settings Updates vulnerability discovered by Lucio Sá in WordPress Plugin Booking Ultra Pro versions = 1.1.13...

5.4CVSS7AI score0.00298EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/07/16 12:00 a.m.9 views

Tenda AX2 Pro 安全漏洞

Tenda AX2 Pro is a home user designed entry-level Gigabit Wi-Fi 6 router from Tenda China. A code execution vulnerability exists in Tenda AX2 Pro version V16.03.29.48, which can be exploited by an attacker to execute arbitrary code via the Routing feature...

9.8CVSS8.3AI score0.00658EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/07/15 2:35 a.m.10 views

WordPress Shortcodes Ultimate Pro plugin < 7.1.5 - Contributor+ Stored Cross-Site Scripting XSS vulnerability

Contributor+ Stored Cross-Site Scripting XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Shortcodes Ultimate Pro versions 7.1.5...

4.7CVSS5.3AI score0.00461EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2024/07/15 12:00 a.m.22 views

WordPress Shortcodes Ultimate Pro Plugin < 7.1.5 is vulnerable to Cross Site Scripting (XSS)

Software Shortcodes Ultimate Pro Type Plugin Vulnerable versions 7.1.5 Fixed in 7.1.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4217 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b6182f916e0f Credits Dmitrii Ignatyev...

4.7CVSS6AI score0.00461EPSS
SaveExploits1References3Affected Software1
Citrix
Citrix
added 2024/07/14 12:00 a.m.14 views

Citrix Virtual Apps and Desktop - Graphics, HDX Optimization and Audio

Introduction This article is a summary of the support articles and documentation related to Graphics and Display issues, HDX Optimization Teams and Browser Content Redirection and Audio. Overview of the Issue HDX is a set of remoting technologies providing the user with the best possible virtual...

7AI score
SaveExploits0
OSV
OSV
added 2024/07/13 6:15 a.m.9 views

CVE-2024-4217

The shortcodes-ultimate-pro WordPress plugin before 7.1.5 does not properly escape some of its shortcodes' settings, making it possible for attackers with a Contributor account to conduct Stored XSS attacks...

4.7CVSS5.8AI score0.00461EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/07/13 12:00 a.m.11 views

WordPress plugin shortcodes-ultimate-pro security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability in...

4.7CVSS6.1AI score0.00461EPSS
SaveExploits1References2
Citrix
Citrix
added 2024/07/13 12:00 a.m.16 views

How to Configure XenServer 6.x Multi-GPU Passthrough for XenDesktop HDX 3D Pro Graphics

This article describes how to configure XenServer 6.0 with XenDesktop for HDX 3D Pro Graphics so that a host workstation with multiple graphics cards can be shared by an equal number of concurrent high-end professional graphics users one user per GPU, thereby reducing the cost per user. Hardware...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/07/13 12:00 a.m.10 views

PT-2024-29785 · WordPress · Shortcodes-Ultimate-Pro

Name of the Vulnerable Software and Affected Versions: shortcodes-ultimate-pro WordPress plugin versions prior to 7.1.5 Description: The issue allows attackers with a Contributor account to conduct Stored XSS attacks due to improper escaping of some shortcode settings. Recommendations: For versio...

4.7CVSS6AI score0.00461EPSS
SaveExploits1References5
NVD
NVD
added 2024/07/12 4:15 p.m.20 views

CVE-2024-38717

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Booking Ultra Pro allows PHP Local File Inclusion.This issue affects Booking Ultra Pro: from n/a through 1.1.13...

7.1CVSS0.00447EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/12 3:16 p.m.28 views

CVE-2024-38717 WordPress Booking Ultra Pro Appointments Booking Calendar plugin <= 1.1.13 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Booking Ultra Pro allows PHP Local File Inclusion.This issue affects Booking Ultra Pro: from n/a through 1.1.13...

7.1CVSS0.00447EPSS
SaveExploits0References1
Rows per page
Query Builder