CVE-2024-8014

In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924, a code execution attack is possible through object injection via an insecure type resolution vulnerability...

CVE-2024-8048

In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924, a code execution attack is possible using object injection via insecure expression evaluation...

CVE-2025-0509

creationtimestamp| type| source ---|---|--- 2025-02-04 20:13:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113947442188091904 2025-02-04 20:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lheuqt3inl27 2025-02-04 22:15:18+00:00| seen|...

Python Library Django 4.2.x < 4.2.18 / 5.0.x < 5.0.11 / 5.1.x < 5.1.5 DoS

The detected version of the Django Python package, Django, is 4.2.x prior to 4.2.18, 5.0.x prior to 5.0.11 or 5.1.x prior to 5.1.5. It is, therefore, affected by a denial of service vulnerability as disclosed in Django's January 14th 2025 security advisory. A lack of upper bound limit enforcement...

CVE-2025-24371 Malicious peer can make node stuck in blocksync in github.com/cometbft/cometbft

CometBFT is a distributed, Byzantine fault-tolerant, deterministic state machine replication engine. In the blocksync protocol peers send their base and latest heights when they connect to a new node A, which is syncing to the tip of a network. base acts as a lower ground and informs A that the...

CVE-2025-24371 Malicious peer can make node stuck in blocksync in github.com/cometbft/cometbft

CometBFT is a distributed, Byzantine fault-tolerant, deterministic state machine replication engine. In the blocksync protocol peers send their base and latest heights when they connect to a new node A, which is syncing to the tip of a network. base acts as a lower ground and informs A that the...

CVE-2025-20637

creationtimestamp| type| source ---|---|--- 2025-02-03 04:16:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhaonv5fbp2c 2025-02-03 07:46:48+00:00| seen| https://t.me/cvedetector/17046 2025-02-03 08:03:49+00:00| seen|...

CVE-2024-13216

creationtimestamp| type| source ---|---|--- 2025-01-31 05:23:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113921294156429587 2025-01-31 06:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdx2lmwe2n 2025-01-31 07:24:19+00:00|...

CVE-2024-12444

creationtimestamp| type| source ---|---|--- 2025-01-30 14:16:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodnhyp32f 2025-01-30 14:16:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113917730431983422...

CVE-2024-12299

creationtimestamp| type| source ---|---|--- 2025-01-30 14:16:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodio7ii2t 2025-01-30 14:16:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113917730403182409...

CVE-2025-23007

creationtimestamp| type| source ---|---|--- 2025-01-30 09:45:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113916663254527555 2025-01-30 11:18:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3471 2025-01-30 11:25:40+00:00| seen|...

snowflake-connector-python vulnerable to SQL Injection in write_pandas

Issue Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. A function from the snowflake.connector.pandastools module is vulnerable to SQL injection. This vulnerability affects versions 2.2.5 through 3.13.0. Snowflake fixed the issue in version 3.13.1...

CVE-2024-10001

A Code Injection vulnerability was identified in GitHub Enterprise Server that allowed attackers to inject malicious code into the query selector via the identity property in the message handling function. This enabled the exfiltration of sensitive data by manipulating the DOM, including...

CVE-2025-24789

creationtimestamp| type| source ---|---|--- 2025-01-29 17:47:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113912895243480427 2025-01-29 18:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvlavortv2c 2025-01-29 19:11:17+00:00|...

CVE-2025-0784

creationtimestamp| type| source ---|---|--- 2025-01-28 20:08:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113907786969460977 2025-01-28 20:16:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbjacphu2t 2025-01-28 22:58:15+00:00| seen|...

Rockwell Automation FactoryTalk

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute code on the device with elevated privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize...

CVE-2024-45339

creationtimestamp| type| source ---|---|--- 2025-01-28 01:27:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113903378632969158 2025-01-28 02:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrf5eromi2h 2025-01-28 04:34:41+00:00| seen|...

CVE-2024-56951

creationtimestamp| type| source ---|---|--- 2025-01-27 19:04:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113901873776606220 2025-01-27 19:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqnnqwswa2r...

CVE-2025-23197

creationtimestamp| type| source ---|---|--- 2025-01-27 17:29:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113901498998569976 2025-01-27 18:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqkd37gqx27 2025-01-27 20:11:17+00:00| seen|...

Apache Superset Error Disclosure

The vulnerability of Apache Superset’s data visualization software is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...