CVE-2024-56035

CVE-2024-56035 — The connected sources indicate an XSS vulnerability in the WordPress plugin Upload Scanner (CVE-2024-56035). The entry describes an improper neutralization of input during web page generation that allows Reflected XSS. Affected software: Upload Scanner, versions up to 1.2 (from n...

ProjectSend Detection

Binary data projectsendprojectsenddetect.nbin...

WordPress plugin Upload Scanner 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

BeyondTrust Remote Support Unsupported Version Detection

Binary data beyondtrustremotesupportunsupported.nbin...

BeyondTrust Privileged Remote Access Unsupported Version Detection

Binary data beyondtrustprivilegedremoteaccessunsupported.nbin...

Fedora 41 : tomcat (2024-2cb3145f8d)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-2cb3145f8d advisory. Automatic update for tomcat-9.0.98-1.fc41. Changelog for tomcat Mon Dec 09 2024 Packit - 1:9.0.98-1 - Update to version 9.0.98 - Resolves: rhbz2331168 Mon De...

Dell Integrated Remote Access Controller (iDRAC) Hardware Detection

Binary data dellidracdevicedetect.nbin...

Dell Integrated Remote Access Controller (iDRAC) OS Detection

Binary data dellidracdetect.nbin...

SUSE SLED15: grpc-devel / grpc-source / libgrpc++1_60 / libgrpc1_60 / libgrpc37 / etc (SUSE-SU-2024:4401-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4401-1 advisory. - CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy...

CBL Mariner 2.0 Security Update: python3 / tensorflow (CVE-2024-6923)

The version of python3 / tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-6923 advisory. - There is a MEDIUM severity vulnerability affecting CPython. The email module didn't properly...

GHSA-6V67-2WR5-GVF4 vulnerabilities

Vulnerabilities for packages: sonar-scanner-cli, sonarqube-10, management-api-for-apache-cassandra-5.0, kserve-modelmesh, cassandra, thingsboard, apache-nifi, trino, zookeeper-fips, akhq, dependency-track, tez, cassandra-reaper, ontop, management-api-for-apache-cassandra-4.0, cassandra-fips,...

GHSA-PR98-23F8-JWXV vulnerabilities

Vulnerabilities for packages: sonar-scanner-cli, sonarqube-10, management-api-for-apache-cassandra-5.0, kserve-modelmesh, cassandra, thingsboard, apache-nifi, trino, zookeeper-fips, akhq, dependency-track, tez, cassandra-reaper, ontop, management-api-for-apache-cassandra-4.0, cassandra-fips,...

CVE-2024-12801 vulnerabilities

Vulnerabilities for packages: sonar-scanner-cli, sonarqube-10, management-api-for-apache-cassandra-5.0, kserve-modelmesh, cassandra, thingsboard, apache-nifi, trino, zookeeper-fips, akhq, dependency-track, tez, cassandra-reaper, ontop, management-api-for-apache-cassandra-4.0, cassandra-fips,...

Web Hacking Service ‘Araneida’ Tied to Turkish IT Firm

Cybercriminals are selling hundreds of thousands of credential sets stolen with the help of a cracked version of Acunetix , a powerful commercial web app vulnerability scanner, new research finds. The cracked software is being resold as a cloud-based attack tool by at least two different services...

CVE-2024-12798 vulnerabilities

Vulnerabilities for packages: sonar-scanner-cli, sonarqube-10, management-api-for-apache-cassandra-5.0, kserve-modelmesh, cassandra, thingsboard, apache-nifi, trino, zookeeper-fips, akhq, dependency-track, tez, cassandra-reaper, ontop, management-api-for-apache-cassandra-4.0, cassandra-fips,...

CBL Mariner 2.0 Security Update: moby-engine (CVE-2024-36621)

The version of moby-engine installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36621 advisory. - moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The...

Mattermost Server 9.5.x < 9.5.12, 9.11.x < 9.11.4, 10.0.x < 10.0.2, 10.1.x < 10.1.2, 10.2.0 (MMSA-2024-00386)

The version of Mattermost Server installed on the remote host is prior to 9.5.12, 9.11.4, 10.0.2, 10.1.2 or 10.2.0. It is, therefore, affected by a vulnerability as referenced in the MMSA-2024-00386 advisory. - Mattermost versions 10.0.x = 10.0.1, 10.1.x = 10.1.1, 9.11.x = 9.11.3, 9.5.x = 9.5.11...

Google Chrome < 131.0.6778.204 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 131.0.6778.204. It is, therefore, affected by multiple vulnerabilities as referenced in the 202412stable-channel-update-for-desktop18 advisory. - Out of bounds write in V8 in Google Chrome prior to 131.0.6778.204 allowe...

WordPress Upload Scanner plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Zlrqh Patchstack Alliance in WordPress Plugin Upload Scanner versions = 1.2...

Fedora 40 : chromium (2024-162a4dfe4f)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-162a4dfe4f advisory. Update to 131.0.6778.139 High CVE-2024-12381: Type Confusion in V8 High CVE-2024-12382: Use after free in Translate Tenable has extracted the...