PT-2024-35957

Name of the Vulnerable Software and Affected Versions lunary-ai/lunary version 1.2.2 Description A security issue exists in lunary-ai/lunary version 1.2.2 that allows account hijacking. A user with a 'viewer' role can obtain a password reset token by sending a specific request to the server. The...

CVE-2024-20021

creationtimestamp| type| source ---|---|--- 2024-10-16 19:03:36+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/11294 2024-10-19 19:27:30+00:00| published-proof-of-concept| https://t.me/BlackHat0Hackers/3666 2026-07-26 02:00:17+00:00| seen| https://t.me/cyberwarehouse/57...

CVE-2024-45219

creationtimestamp| type| source ---|---|--- 2024-10-16 11:20:45+00:00| published-proof-of-concept| https://t.me/cvedetector/8032...

CVE-2024-24684

creationtimestamp| type| source ---|---|--- 2024-10-15 23:06:55+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8748...

GHSA-2234-FMW7-43WR Hono allows bypass of CSRF Middleware by a request without Content-Type header.

Summary Bypass CSRF Middleware by a request without Content-Type herader. Details Although the csrf middleware verifies the Content-Type Header, Hono always considers a request without a Content-Type header to be safe...

CVE-2019-19697

creationtimestamp| type| source ---|---|--- 2024-10-14 22:12:13+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/538...

CVE-2019-6800

creationtimestamp| type| source ---|---|--- 2024-10-14 21:11:22+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/492...

CVE-2020-9697

creationtimestamp| type| source ---|---|--- 2024-10-14 17:30:04+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1576 2026-09-01 17:01:14+00:00| seen| https://t.me/cissp/1199 2026-09-02 01:05:03+00:00| seen| https://t.me/cissp/1199...

Incorrect Calculation

github.com/ethereum/go-ethereum is vulnerable to an Incorrect Calculation. The vulnerability is due to a miscalculation of Proof of Work PoW generation caused by an error in the DAG creation process...

CVE-2019-16692

creationtimestamp| type| source ---|---|--- 2024-10-11 21:55:25+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/451...

CVE-2019-13564

creationtimestamp| type| source ---|---|--- 2024-10-11 21:48:04+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/449...

CVE-2017-7763

creationtimestamp| type| source ---|---|--- 2024-10-11 21:42:45+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/439...

CVE-2017-5089

creationtimestamp| type| source ---|---|--- 2024-10-11 21:42:45+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/439...

GHSA-GX9M-WHJM-85JF DOMpurify has a nesting-based mXSS

DOMpurify was vulnerable to nesting-based mXSS fixed by 0ef5e537 2.x and merge 943 Backporter should be aware of GHSA-mmhx-hmjr-r674 CVE-2024-45801 when cherry-picking POC is avaible under test...

CVE-2018-0208

creationtimestamp| type| source ---|---|--- 2024-10-11 07:45:56+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/64...

Vulnerabilities fixed in Ivanti Connect Secure and Policy Secure

Ivanti has fixed a vulnerability in Connect Secure and Policy Secure. UPDATE: POC code is now available online for this vulnerability. An authenticated malicious person with access to the admin portal of Connect Secure or Policy Secure can exploit the vulnerability to execute code remotely. Ivant...

CVE-2018-4991

creationtimestamp| type| source ---|---|--- 2024-10-10 22:50:08+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/404...

CVE-2020-15900

creationtimestamp| type| source ---|---|--- 2024-10-10 18:24:12+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1562...

CVE-2019-6177

creationtimestamp| type| source ---|---|--- 2024-10-10 18:03:05+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/382...

Vulnerabilities fixed in Zimbra

Synacor has fixed vulnerabilities in Zimbra Collaboration. By sending a specially prepared e-mail to the SMTP server, code execution can be obtained directly on the Zimbra server that can be used, for example, to place a webshell. Researchers have published Proof-of-Concept code that demonstrates...