GHSA-26WH-CC3R-W6PJ

creationtimestamp| type| source ---|---|--- 2025-04-02 21:34:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10144 2025-04-02 22:04:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114270632021246470 2025-04-02 22:04:31+00:00| seen|...

GHSA-56P6-QW3C-FQ2G Suspended Directus user can continue to use session token to access API

Summary Since the user status is not checked when verifying a session token a suspended user can use the token generated in session auth mode to access the API despite their status. Details There is a check missing in verifySessionJWT to verify that a user is actually still active and allowed to...

GHSA-2C93-XXQG-54GM

creationtimestamp| type| source ---|---|--- 2025-03-21 22:17:45+00:00| seen| https://chaos.social/users/gsuberland/statuses/114202736244863531...

GHSA-94H4-FJ37-C825

creationtimestamp| type| source ---|---|--- 2025-02-27 18:18:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114077225711677534...

GHSA-3J9M-CP35-94FR

creationtimestamp| type| source ---|---|--- 2025-02-04 18:51:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113947120626335280...

GHSA-X5RV-W9PM-8QP8

creationtimestamp| type| source ---|---|--- 2025-01-31 02:04:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113920512197050890 2025-01-31 03:21:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3551 2025-01-31 15:14:56+00:00| published-proof-of-concept|...

GHSA-HJ49-H7FQ-PX5H

creationtimestamp| type| source ---|---|--- 2025-01-30 19:25:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113918942752937670...

GHSA-69WR-VHWG-84H2

creationtimestamp| type| source ---|---|--- 2025-01-06 18:13:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113782763860609034...

GHSA-2J38-PJH8-WFXW

creationtimestamp| type| source ---|---|--- 2024-12-23 15:48:34+00:00| seen| https://infosec.exchange/users/edwardk/statuses/113702922768301130 2025-01-07 15:39:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/443...

CVE-2024-12741

creationtimestamp| type| source ---|---|--- 2024-12-18 19:21:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113675448862003579 2024-12-18 22:04:01+00:00| seen| https://t.me/cvedetector/13249 2025-03-03 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-105/...

CVE-2024-51927

creationtimestamp| type| source ---|---|--- 2024-11-20 04:08:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113513312411798848...

BIT-MATTERMOST-2023-49874

Mattermost fails to check whether a user is a guest when updating the tasks of a private playbook run allowing a guest to update the tasks of a private playbook run if they know the run ID...

GHSA-6MX3-9QFH-77GJ Mattermost denial of service through long emoji value

Mattermost fails to properly validate the length of the emoji value in the custom user status, allowing an attacker to send multiple times a very long string as an emoji value causing high resource consumption and possibly crashing the server...

Mattermost denial of service through long emoji value

Mattermost fails to properly validate the length of the emoji value in the custom user status, allowing an attacker to send multiple times a very long string as an emoji value causing high resource consumption and possibly crashing the server...

CVE-2024-24988 Excessive resource consumption when sending long emoji names in user custom status

Mattermost fails to properly validate the length of the emoji value in the custom user status, allowing an attacker to send multiple times a very long string as an emoji value causing high resource consumption and possibly crashing the server...

CVE-2024-24988

Mattermost fails to properly validate the length of the emoji value in the custom user status, allowing an attacker to send multiple times a very long string as an emoji value causing high resource consumption and possibly crashing the server...

PT-2024-2031 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions prior to v8.1.9 Description: The issue is related to uncontrolled resource consumption. An attacker can exploit this by setting a custom user status with an emoji value as a very long string, causing high resource...

CVE-2024-24988: Uncontrolled Resource Consumption

Mattermost fails to properly validate the length of the emoji value in the custom user status, allowing an attacker to send multiple times a very long string as an emoji value causing high resource consumption and possibly crashing the server...

Design/Logic Flaw

Mattermost fails to check whether a user is a guest when updating the tasks of a private playbook run allowing a guest to update the tasks of a private playbook run if they know the run ID...

PT-2023-5371 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 Description: The issue is related to a stack overflow in the dir setWanWifi function, which can be triggered via the statuscheckpppoeuser parameter. This can potentially allow a remote attacker to impact th...