CVE-2024-43356

creationtimestamp| type| source ---|---|--- 2024-08-26 23:50:52+00:00| seen| https://t.me/cvedetector/4206...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to always initialize iuid/igid...

CVE-2024-7669

creationtimestamp| type| source ---|---|--- 2024-08-12 15:56:18+00:00| seen| https://t.me/cvedetector/2833...

CVE-2023-42957

creationtimestamp| type| source ---|---|--- 2024-07-29 23:50:09+00:00| seen| https://t.me/cvedetector/1930 2025-03-19 21:18:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8160...

CVE-2024-6520

creationtimestamp| type| source ---|---|--- 2024-07-27 14:57:09+00:00| seen| https://t.me/cvedetector/1754...

CVE-2024-40516

creationtimestamp| type| source ---|---|--- 2024-07-16 22:08:26+00:00| seen| https://t.me/cvedetector/992...

PT-2024-37620 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.5.x through 9.5.5 Mattermost versions 9.6.x through 9.6.2 Mattermost versions 9.7.x through 9.7.4 Mattermost version 9.8.0 Description: The issue allows an attacker to specify both a remoteId and the user ID when creatin...

CVE-2024-23710

In assertPackageWithSharedUserIdIsPrivileged of InstallPackageHelper.java, there is a possible execution of arbitrary app code as a privileged app due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is...

pmix: race condition allows attackers to obtain ownership of arbitrary files

OpenPMIx PMIx is vulnerable to a race condition during execution of library code with UID 0, which allows attackers to obtain ownership of arbitrary files...

SUSE CVE-2024-26822

In the Linux kernel, the following vulnerability has been resolved: smb: client: set correct id, uid and cruid for multiuser automounts When uid, gid and cruid are not specified, we need to dynamically set them into the filesystem context used for automounting otherwise they'll end up reusing the...

CVE-2024-30938

SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMSUser.php component...

CVE-2023-44091

creationtimestamp| type| source ---|---|--- 2024-03-19 18:26:50+00:00| seen| https://t.me/ctinow/211802...

CVE-2019-5064

creationtimestamp| type| source ---|---|--- 2024-03-19 12:11:08+00:00| seen| https://t.me/ctinow/211391 2024-10-14 21:44:46+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/508...

Employee Task Management System SQL Injection Vulnerability

Employee Task Management System is an Employee Task Management System by Carlo Montero Personal Developer. An SQL injection vulnerability exists in Employee Task Management System version 1.0, which stems from an incorrect manipulation of the parameter userid that can result in an sql injection...

GHSA-3J27-563V-28WF

creationtimestamp| type| source ---|---|--- 2024-03-06 18:16:34+00:00| seen| https://t.me/ctinow/201597...

GHSA-RV4H-M4WC-V99W

creationtimestamp| type| source ---|---|--- 2024-03-01 21:21:46+00:00| seen| https://t.me/ctinow/197995...

GHSA-3HRR-XWVG-HXVR

creationtimestamp| type| source ---|---|--- 2024-02-29 21:26:58+00:00| seen| https://t.me/ctinow/197022...

RHSA-2024:1017

creationtimestamp| type| source ---|---|--- 2024-02-28 13:17:07+00:00| seen| https://t.me/ctinow/195404...

GHSA-5JJQ-8CVJ-V6M9

creationtimestamp| type| source ---|---|--- 2024-02-21 01:06:49+00:00| seen| https://t.me/ctinow/189064 2024-02-21 13:05:31+00:00| published-proof-of-concept| https://t.me/arpsyndicate/3753...

Open-Xchange App Suite Security Vulnerability

Open-Xchange App Suite is an email and productivity suite client software from Open-Xchange Germany. A security vulnerability exists in Open-Xchange App Suite that stems from a user ID reference not properly cleaned up as mentioned in the documentation notes, where script code could be injected...