CVE-2024-49252

CVE-2024-49252 corresponds to a Broken Access Control / Full Path Disclosure vulnerability in the WordPress Leyka plugin (versions

CVE-2024-49252 WordPress leyka plugin <=3.31.6 - Broken Access Control vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in VaultDweller Leyka leyka.This issue affects Leyka: from n/a through = 3.31.6...

CVE-2024-47637

CVE-2024-47637 is a path-traversal vulnerability in LiteSpeed Cache for WordPress (LiteSpeed Cache plugin) affecting versions up to 6.4.1. The issue enables relative path traversal due to insufficient input validation, with CVSS 3.1 base score 8.8 (HIGH). A fix is available: update to 6.5.1. Unti...

About Cross Site Scripting – Roundcube Webmail (CVE-2024-37383) vulnerability

About Cross Site Scripting - Roundcube Webmail CVE-2024-37383 vulnerability. Roundcube is a web-based email client with functionality comparable to desktop email clients such as Outlook Express or Mozilla Thunderbird. The vulnerability is caused by an error in the processing of SVG elements in th...

CVE-2019-19697

creationtimestamp| type| source ---|---|--- 2024-10-14 22:12:13+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/538...

Veeam B&R RCE vulnerability CVE-2024-40711 is exploited in attacks

Veeam B &R RCE vulnerability CVE-2024-40711is exploited in attacks. On September 24, there were no signs of this vulnerability being exploited in the wild. And on October 10, Sophos X-Ops reported that they had observed a series of attacks exploiting this vulnerability over the course of a month...

CVE-2019-16692

creationtimestamp| type| source ---|---|--- 2024-10-11 21:55:25+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/451...

CVE-2017-7763

creationtimestamp| type| source ---|---|--- 2024-10-11 21:42:45+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/439...

Artica Proxy 4.40 Code Injection

============================================================================================================================================= | Title : Artica Proxy appliance 4.40 Code Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...

CVE-2019-1166

creationtimestamp| type| source ---|---|--- 2024-10-10 02:52:34+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/797...

CVE-2021-26121

creationtimestamp| type| source ---|---|--- 2024-10-09 19:11:32+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2705...

CVE-2021-25684

creationtimestamp| type| source ---|---|--- 2024-10-09 19:10:04+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2728...

CVE-2019-1218

creationtimestamp| type| source ---|---|--- 2024-10-08 20:48:11+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/531...

Qualcomm Urges OEMs to Patch Critical DSP and WLAN Flaws Amid Active Exploits

Qualcomm has rolled out security updates to address nearly two dozen flaws spanning proprietary and open-source components, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2024-43047 CVSS score: 7.8, has been described as a...

CVE-2024-47374

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through = 6.5.0.2...

CVE-2024-47373

CVE-2024-47373 is a stored Cross-Site Scripting (XSS) vulnerability in LiteSpeed Cache (WordPress plugin) affecting versions up to 6.5.0.2. The issue arises from improper neutralization of input during web page generation, enabling stored XSS. Public sources (NVD, Red Hat, Patchstack, CVE lists) ...

CVE-2024-47374

CVE-2024-47374 affects the WordPress LiteSpeed Cache plugin up to version 6.5.0.2. The vulnerability is a stored XSS caused by improper input neutralization during web page generation, enabling attackers to execute malicious scripts in victims’ browsers. Impact can include session hijacking or pa...

CVE-2024-47644

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Copyscape Copyscape Premium copyscape-premium allows Stored XSS.This issue affects Copyscape Premium: from n/a through = 1.3.9...

CVE-2024-47644

CVE-2024-47644 affects the WordPress Copyscape Premium plugin (Copyscape Premium) up to version 1.3.6. The vulnerability is a Cross-Site Request Forgery (CSRF) that enables Stored XSS, with CVSS v3.1 base score 7.1 (HIGH). Patch guidance: fixed in version 1.4.0. Exploitation details are not docum...

CVE-2024-47374: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through = 6.5.0.2...