CVE-2024-12337

creationtimestamp| type| source ---|---|--- 2025-01-08 11:13:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113792436170808261 2025-01-08 11:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7zxsnpbw2a 2025-01-08 11:53:50+00:00| seen|...

CVE-2024-12854

creationtimestamp| type| source ---|---|--- 2025-01-08 09:19:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113791990278283510 2025-01-08 10:12:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/688 2025-01-08 10:15:26+00:00| seen|...

CVE-2024-12712

CVE-2024-12712 affects the Shopping Cart & eCommerce Store (WordPress) plugin, citing a missing capability check on the webhook function that allowed unauthenticated modification of order statuses in all versions up to 5.7.8. Public sources from Red Hat and Wordfence indicate this was patched in ...

urllib3: Request body not stripped after redirect from 303 status changes request method to GET

A flaw was found in urllib3, an HTTP client library for Python. urllib3 doesn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303, after changing the method in a request from one that could accept a request body such as POST to GET, as is required by HTTP...

CVE-2024-12328

creationtimestamp| type| source ---|---|--- 2025-01-08 08:19:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113791755023463208 2025-01-08 09:13:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/685 2025-01-08 09:15:34+00:00| seen|...

CVE-2024-12045

creationtimestamp| type| source ---|---|--- 2025-01-08 07:20:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113791523838062644 2025-01-08 07:38:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/668 2025-01-08 08:15:45+00:00| seen|...

CVE-2024-12852

creationtimestamp| type| source ---|---|--- 2025-01-08 06:43:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113791376052153686 2025-01-08 06:47:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113791390817081497 2025-01-08 07:15:55+00:00| seen|...

CVE-2024-12584

creationtimestamp| type| source ---|---|--- 2025-01-08 06:43:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113791376022240183 2025-01-08 06:47:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113791390788597629 2025-01-08 07:15:50+00:00| seen|...

CVE-2024-56453

creationtimestamp| type| source ---|---|--- 2025-01-08 03:38:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/619 2025-01-08 04:16:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7cjlkhjt25 2025-01-08 05:46:55+00:00| seen| https://t.me/cvedetector/14647...

CVE-2025-21603

creationtimestamp| type| source ---|---|--- 2025-01-08 03:37:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/614 2025-01-08 03:47:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113790686183065901 2025-01-08 04:16:20+00:00| seen|...

CVE-2024-56437

creationtimestamp| type| source ---|---|--- 2025-01-08 02:31:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113790387181799244 2025-01-08 02:38:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/606 2025-01-08 03:15:36+00:00| seen|...

CVE-2023-52953

creationtimestamp| type| source ---|---|--- 2025-01-08 02:16:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113790328134081954 2025-01-08 02:38:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/610 2025-01-08 03:15:22+00:00| seen|...

CVE-2023-52954

creationtimestamp| type| source ---|---|--- 2025-01-08 02:16:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113790328149103965 2025-01-08 02:38:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/609 2025-01-08 03:15:24+00:00| seen|...

CVE-2024-56434

creationtimestamp| type| source ---|---|--- 2025-01-08 01:47:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113790212230543205 2025-01-08 02:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf73tg4thr2x 2025-01-08 02:39:13+00:00| seen|...

GitLab CE/EE 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab CE/EE, which stems from the ability of...

CVE-2024-12431: Missing Authorization

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and 17.7 before 17.7.1, in which unauthorized users could manipulate the status of issues in public projects...

GitLab 15.5 < 17.5.5 / 17.6 < 17.6.3 / 17.7 < 17.7.1 (CVE-2024-12431)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and 17.7 before 17.7.1, in which unauthorized users could manipulate the status of...

CVE-2018-4301

creationtimestamp| type| source ---|---|--- 2025-01-07 23:29:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113789670850933219 2025-01-07 23:37:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/598 2025-01-08 00:15:48+00:00| seen|...

CVE-2025-22132

creationtimestamp| type| source ---|---|--- 2025-01-07 22:10:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113789358194226275 2025-01-07 22:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6ofjv27f22 2025-01-07 22:37:05+00:00|...

CVE-2024-35532

creationtimestamp| type| source ---|---|--- 2025-01-07 19:52:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113788814842504305 2025-01-07 20:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6hot2bwk25 2025-01-07 20:39:46+00:00|...