Stored Cross-site Scripting (XSS)

redaxo/source is vulnerable to Stored cross-site scripting XSS. The vulnerability is due to improper input validation in the /media/test.html component, allowing attackers to inject malicious scripts into the password parameter...

CVE-2024-55457

creationtimestamp| type| source ---|---|--- 2025-01-06 13:20:48+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-55457.yaml 2025-02-20 20:41:25+00:00| seen| https://t.me/cvedetector/18591 2025-06-29 00:00:00+00:00| seen| The Shadowserver...

CVE-2024-52570

creationtimestamp| type| source ---|---|--- 2024-11-18 19:03:36+00:00| seen| https://t.me/cvedetector/11356 2024-11-19 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1522/ 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...

CVE-2024-43089

creationtimestamp| type| source ---|---|--- 2024-11-07 17:04:54+00:00| seen| https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429 2024-11-13 19:44:42+00:00| seen| https://t.me/cvedetector/10857...

CVE-2024-47463

creationtimestamp| type| source ---|---|--- 2024-11-06 00:46:36+00:00| seen| https://t.me/cvedetector/9957 2024-11-06 16:21:22+00:00| seen| https://vulnerability.circl.lu/bundle/07fca93b-c28d-44e4-8497-18f4bbbd16f9 2024-11-12 12:30:05+00:00| seen| https://t.me/truesecator/6419...

CVE-2024-8925

creationtimestamp| type| source ---|---|--- 2024-10-08 07:00:59+00:00| seen| https://t.me/cvedetector/7303 2025-04-14 04:19:32+00:00| seen| https://vulnerability.circl.lu/bundle/9bbd91e2-309f-4b35-9b31-fc613b3101d9...

CVE-2024-47079 Unauthorized usage of remote hardware module because of missing channel verification

Meshtastic is an open source, off-grid, decentralized, mesh network built to run on affordable, low-power devices. Meshtastic firmware is an open source firmware implementation for the broader project. The remote hardware module of the firmware does not have proper checks to ensure a remote...

cute_png 缓冲区错误漏洞

cutepng is an application of cutepng open source. A buffer error vulnerability exists in cutepng version 1.05, which stems from a heap buffer overflow vulnerability contained in the cploadpngmem function at cutepng.h. The vulnerability is caused by the use of the cploadpngmem function at cutepng...

OpenIPMI 安全漏洞

OpenIPMI is an open source project from OpenIPMI Open Source. Designed to create a fully functional IPMI system that allows full access rights to all IPMI information on a server. A security vulnerability exists in OpenIPMI that stems from a lack of authorization type checking on incoming LAN...

cn.acyou:leo-framework-barcode (=1.6.0.RELEASE), cn.acyou:leo-framework-commons (=1.6.0.RELEASE) +185 more potentially affected by CVE-2024-42681 via com.xuxueli:xxl-job-core (>=1.8.2 <=2.4.1)

com.xuxueli:xxl-job-core MAVEN version =1.8.2, =1.0.7, =1.0.6, =1.2.3, =1.0.0-RELEASE, =0.0.8-RELEASE, =0.0.8-RELEASE, =1.0.0, =1.6.0, =1.6.154 and more Source cves: CVE-2024-42681 Source advisory: OSV:GHSA-CPFP-M5QW-C4R3...

CVE-2024-41076

creationtimestamp| type| source ---|---|--- 2024-07-29 17:58:06+00:00| seen| https://t.me/cvedetector/1861 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

About the security content of macOS Ventura 13.6.8

About the security content of macOS Ventura 13.6.8 This document describes the security content of macOS Ventura 13.6.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

CVE-2024-38472

creationtimestamp| type| source ---|---|--- 2024-07-17 12:43:59+00:00| seen| https://vulnerability.circl.lu/bundle/a23cbcad-e890-4df8-8736-9332ed4c3d47 2024-08-10 06:12:20+00:00| published-proof-of-concept| https://t.me/HackerArsenal/144 2024-08-12 11:45:27+00:00| seen|...

CVE-2024-36418 SuiteCRM authenticated RCE using connectors

SuiteCRM is an open-source Customer Relationship Management CRM software application. Prior to versions 7.14.4 and 8.6.1, a vulnerability in connectors allows an authenticated user to perform a remote code execution attack. Versions 7.14.4 and 8.6.1 contain a fix for this issue...

AJ-Report SQL Injection Vulnerability (CNVD-2024-27556)

AJ-Report is anji-plus open source a completely open source , drag and drop editing visual design tools. AJ-Report 1.4.1 and earlier versions of SQL injection vulnerability , there is no detailed vulnerability details provided...

CVE-2021-47063

creationtimestamp| type| source ---|---|--- 2024-03-01 00:26:24+00:00| seen| https://t.me/ctinow/197158 2024-03-01 06:11:31+00:00| seen| https://t.me/ctinow/197295 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

actix-session-surrealdb (>=0.1.0 <=0.1.5) potentially affected by unknown CVE via surrealdb (=1.0.0-beta.9)

surrealdb CARGO version =1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.5 Source cves: unknown CVE Source advisory: OSV:GHSA-6R8P-HPG7-825G...

China's MIIT Introduces Color-Coded Action Plan for Data Security Incidents

China's Ministry of Industry and Information Technology MIIT on Friday unveiled draft proposals detailing its plans to tackle data security events in the country using a color-coded system. The effort is designed to "improve the comprehensive response capacity for data security incidents, to ensu...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (>=0.1.125 <=1.6.179) potentially affected by CVE-2023-6837 via org.wso2.identity.apps:authentication-portal (>=0.1.125 <=1.6.179)

org.wso2.identity.apps:authentication-portal MAVEN version =0.1.125, =0.1.125, =1.6.179 Source cves: CVE-2023-6837 Source advisory: OSV:GHSA-F6JM-9PR8-9C3W...

nautobot-device-resources (=1.0.0) potentially affected by CVE-2023-50263 via nautobot (=2.0.0)

nautobot PYPI version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-device-resources =1.0.0 Source cves: CVE-2023-50263 Source advisory: OSV:PYSEC-2023-286...