Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. dex is an identity service that uses OpenID Connect to drive authentication for other applications. A security vulnerability exists in the Linux Kernel that stems from a lack o...

CVE-2024-23135

creationtimestamp| type| source ---|---|--- 2024-02-22 06:26:39+00:00| seen| https://t.me/ctinow/190443 2024-02-22 06:26:54+00:00| seen| https://t.me/ctinow/190453...

CVE-2024-24771

Open Forms allows users create and publish smart forms. Versions prior to 2.2.9, 2.3.7, 2.4.5, and 2.5.2 contain a non-exploitable multi-factor authentication weakness. Superusers who have their credentials username + password compromised could potentially have the second-factor authentication...

PT-2024-20549 · Unknown · Open Forms

Name of the Vulnerable Software and Affected Versions: Open Forms versions prior to 2.2.9 Open Forms versions prior to 2.3.7 Open Forms versions prior to 2.4.5 Open Forms versions prior to 2.5.2 Description: Open Forms allows users to create and publish smart forms. The software contains a...

Malicious code in nan-win (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a48d06bf13608fbfa08f52c2b2b909075ad70973b7c46be713c54367decc178c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-0685

The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Second Order SQL Injection via the email address value submitted through forms in all versions up to, and including, 3.7.1 due to insufficient escaping on the user supplied parameter...

CVE-2024-0685

The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Second Order SQL Injection via the email address value submitted through forms in all versions up to, and including, 3.7.1 due to insufficient escaping on the user supplied parameter...

Sql injection

The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Second Order SQL Injection via the email address value submitted through forms in all versions up to, and including, 3.7.1 due to insufficient escaping on the user supplied parameter...

CVE-2024-0685 Ninja Forms Contact Form <= 3.7.1 - Unauthenticated Second Order SQL Injection

The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Second Order SQL Injection via the email address value submitted through forms in all versions up to, and including, 3.7.1 due to insufficient escaping on the user supplied parameter...

PT-2024-15748 · WordPress · The Ninja Forms Contact Form – The Drag/Drop Form Builder For Wordpress

Name of the Vulnerable Software and Affected Versions: The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress plugin for WordPress versions up to, and including, 3.7.1 Description: The issue is related to Second Order SQL Injection via the email address value submitted throug...

CVE-2023-33758

creationtimestamp| type| source ---|---|--- 2024-01-25 09:26:28+00:00| seen| https://t.me/ctinow/173337 2024-01-26 15:43:12+00:00| seen| https://t.me/arpsyndicate/2989 2024-01-31 23:16:59+00:00| seen| https://t.me/ctinow/177171 2024-02-18 13:41:44+00:00| seen| https://t.me/ctinow/187246 2025-06-2...

DRUPAL-CONTRIB-2024-003

This module enables you to allow and/or require users to use a second authentication method in addition to password authentication. In some cases, the module allows users to log in with an authentication plugin that an administrator has disabled. This vulnerability is mitigated by the fact that a...

Two-factor Authentication (TFA) - Moderately critical - Access bypass - SA-CONTRIB-2024-003

This module enables you to allow and/or require users to use a second authentication method in addition to password authentication. In some cases, the module allows users to log in with an authentication plugin that an administrator has disabled. This vulnerability is mitigated by the fact that a...

CVE-2023-52325

A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations. Please note: this vulnerability must be used in conjunction with another one to exploit an affected system. In addition, an attacker...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image scaling. A security vulnerability exists in PrestaShop due to an SQL injection vulnerability in the JmsSetting::getSecondImgs...

CVE-2023-48248

creationtimestamp| type| source ---|---|--- 2024-01-10 12:21:59+00:00| seen| https://t.me/ctinow/165742 2024-01-28 10:26:56+00:00| seen| https://t.me/ctinow/174888...

CVE-2023-39853

creationtimestamp| type| source ---|---|--- 2024-01-06 05:31:41+00:00| seen| https://t.me/ctinow/163819 2024-01-11 17:17:11+00:00| seen| https://t.me/ctinow/166653 2024-01-25 00:21:22+00:00| seen| https://t.me/ctinow/173180...

CVE-2024-21623

creationtimestamp| type| source ---|---|--- 2024-01-02 22:26:53+00:00| seen| https://t.me/ctinow/162057 2024-01-03 01:37:28+00:00| seen| https://t.me/cibsecurity/74203 2024-01-08 23:17:28+00:00| seen| https://t.me/ctinow/164700 2026-05-31 14:07:25+00:00| seen|...

CVE-2023-27172

creationtimestamp| type| source ---|---|--- 2024-01-02 19:16:26+00:00| seen| https://t.me/ctinow/161955 2024-01-13 11:21:57+00:00| seen| https://t.me/ctinow/167801...

DEBIAN-CVE-2023-4641

A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from...