CVE-2024-44081: Improper Neutralization of Input During Web Page Generation

In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in clients loading videos from an arbitrary URL if a message from another participant contains a URL encoded in the expected format...

Jitsi Meet 安全漏洞

Jitsi Meet is a set of open source projects from Jitsi Open Source. Enabling users to use and deploy a video conferencing platform with state-of-the-art video quality and features. A security vulnerability previously existed in Jitsi Meet version 2.0.9779, which arose from the fact that the abili...

CVE-2024-44301

creationtimestamp| type| source ---|---|--- 2024-10-28 22:51:58+00:00| seen| https://t.me/cvedetector/9196 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:28+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...

CVE-2024-48196

creationtimestamp| type| source ---|---|--- 2024-10-28 22:01:38+00:00| seen| https://t.me/cvedetector/9180 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:29+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...

CVE-2024-48195

creationtimestamp| type| source ---|---|--- 2024-10-28 22:01:37+00:00| seen| https://t.me/cvedetector/9179 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:29+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...

CVE-2024-44137

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sequoia 15, macOS Sonoma 14.7.1. An attacker with physical access may be able to share items from the lock screen...

CVE-2024-44137

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An attacker with physical access may be able to share items from the lock screen...

CVE-2024-50437

creationtimestamp| type| source ---|---|--- 2024-10-28 21:11:14+00:00| seen| https://t.me/cvedetector/9166 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:30+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...

CVE-2024-9825

creationtimestamp| type| source ---|---|--- 2024-10-28 21:11:07+00:00| seen| https://t.me/cvedetector/9161 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:30+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...

CVE-2024-50581

creationtimestamp| type| source ---|---|--- 2024-10-28 15:19:24+00:00| seen| https://t.me/cvedetector/9111 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:31+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...

CVE-2024-47827

creationtimestamp| type| source ---|---|--- 2024-10-28 15:00:41+00:00| published-proof-of-concept| https://github.com/argoproj/argo-workflows/security/advisories/GHSA-ghjw-32xw-ffwr 2024-10-28 17:50:19+00:00| seen| https://t.me/cvedetector/9139 2025-04-04 21:36:22+00:00| published-proof-of-concep...

A week in security (October 21 – October 27)

Last week on Malwarebytes Labs: 100 million US citizens officially impacted by Change Healthcare data breach Pinterest tracks users without consent, alleges complaint After concerns of handing Facebook taxpayer info, four companies found to have improperly shared data LinkedIn bots and spear...

CVE-2024-48936

creationtimestamp| type| source ---|---|--- 2024-10-28 06:07:24+00:00| seen| https://t.me/cvedetector/9090 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:31+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...

PT-2024-31075 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.2 macOS versions prior to 14.7.2 Description: This issue was addressed through improved state management. A user with screen sharing access may be able to view another user's screen. Recommendations: For macOS...

CVE-2024-10417

creationtimestamp| type| source ---|---|--- 2024-10-27 15:04:07+00:00| seen| https://t.me/cvedetector/9056 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:32+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...

CVE-2024-10413

creationtimestamp| type| source ---|---|--- 2024-10-27 11:43:22+00:00| seen| https://t.me/cvedetector/9052 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:32+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...

CVE-2024-10117

creationtimestamp| type| source ---|---|--- 2024-10-26 14:49:10+00:00| seen| https://t.me/cvedetector/9033 2025-02-14 10:03:10+00:00| seen| Telegram/jQ36yx4nwjxU5dE6p3viwnYEKlLh5UIfzwTrSf0l1aYk33sX 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:32+00:0...

After concerns of handing Facebook taxpayer info, four companies found to have improperly shared data

Four tax preparation software companies failed to comply with government rules that require the sharing of tax-related info to be done only with specific disclosures and full tax-payer consent, according to an audit released by the Treasure Inspector General for Tax Administration TIGTA in the...

SUSE CVE-2024-49853

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix double free in OPTEE transport Channels can be shared between protocols, avoid freeing the same channel descriptors twice when unloading the stack...

CVE-2022-4971

The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'urls' parameter called via the 'heateorssssharingcount' AJAX action in versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping. This makes it possible for...