GHSA-X794-564W-VGXX

creationtimestamp| type| source ---|---|--- 2024-12-11 17:10:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113635295248950416...

WordPress WPCargo Track & Trace plugin <= 8.0.2 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WPCargo Track & Trace versions = 8.0.2...

CVE-2024-12294

creationtimestamp| type| source ---|---|--- 2024-12-11 11:02:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113633848469166263 2024-12-11 12:43:59+00:00| seen| https://t.me/cvedetector/12629 2025-09-16 23:16:38+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764 2025-09-18...

PT-2025-13868

Name of the Vulnerable Software and Affected Versions macOS Ventura versions prior to 13.7.5 macOS Sonoma versions prior to 14.7.5 Description The issue was addressed with improved handling of protocols. An attacker in a privileged network position can track a user's activity. Recommendations For...

Security Vulnerabilities fixed in Thunderbird 115.18 — Mozilla

Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple's GPU driver. This bug only affected the application on Apple M series hardware. Other platforms were unaffected. Enhanced Tracking Protection's Strict...

CVE-2024-55655

creationtimestamp| type| source ---|---|--- 2024-12-10 23:12:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113631058808905104 2024-12-11 01:01:35+00:00| seen| https://t.me/cvedetector/12613 2025-09-16 23:16:38+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764 2025-09-18...

CVE-2024-49142

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 22:07:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113630803588655999 2025-01-14 21:50:00+00:00| seen|...

CVE-2024-47484

creationtimestamp| type| source ---|---|--- 2024-12-10 10:34:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113628075982373757 2024-12-10 13:17:27+00:00| seen| https://t.me/cvedetector/12493 2024-12-16 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1693/...

CVE-2023-50904

creationtimestamp| type| source ---|---|--- 2024-12-09 14:46:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113623406340867935...

CVE-2023-50887

creationtimestamp| type| source ---|---|--- 2024-12-09 14:31:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113623347312984117...

firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims

The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...

firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims

The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...

CVE-2024-12270

creationtimestamp| type| source ---|---|--- 2024-12-07 09:44:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113610893279323997 2024-12-07 11:41:57+00:00| seen| https://t.me/cvedetector/12316 2025-01-06 20:20:04+00:00| seen|...

CVE-2024-11329

creationtimestamp| type| source ---|---|--- 2024-12-07 01:59:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113609066916483610 2024-12-07 04:10:52+00:00| seen| https://t.me/cvedetector/12309...

CVE-2024-54747

creationtimestamp| type| source ---|---|--- 2024-12-06 15:37:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113606618227054679 2024-12-06 18:07:56+00:00| seen| https://t.me/cvedetector/12236...

CVE-2024-54207

creationtimestamp| type| source ---|---|--- 2024-12-06 15:05:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113606494323979888 2024-12-06 16:27:26+00:00| seen| https://t.me/cvedetector/12218...

CVE-2024-52335

creationtimestamp| type| source ---|---|--- 2024-12-06 13:16:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113606066036348865 2024-12-06 13:20:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113606080937405119 2024-12-06 20:06:36+00:00| published-proof-of-concept|...

CVE-2024-51815

creationtimestamp| type| source ---|---|--- 2024-12-06 13:16:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113606066022271275 2024-12-06 13:20:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113606080923087323...

CVE-2024-11352

creationtimestamp| type| source ---|---|--- 2024-12-06 09:06:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113605081727215425 2024-12-06 10:36:09+00:00| seen| https://t.me/cvedetector/12191...

QNAP Systems Qsync Central 后置链接漏洞

QNAP Systems Qsync Central is a cloud-based file synchronization service on a NAS from China Weilian Technology QNAP Systems. A backlink vulnerability exists in QNAP Systems Qsync Central version 4.4.0.1620240819 and prior versions, which stems from the inclusion of a link tracking vulnerability...