42639 matches found
CVE-2024-8591
creationtimestamp| type| source ---|---|--- 2024-10-29 23:59:01+00:00| seen| https://t.me/cvedetector/9375 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1435/ 2025-02-06 02:40:18+00:00| seen| Telegram/bqYOhFsr-Qw4ep7Qx5sToCUFgrPFILTlnJwVe4KMig4zMY...
CVE-2024-9827
creationtimestamp| type| source ---|---|--- 2024-10-29 23:58:41+00:00| seen| https://t.me/cvedetector/9360 2024-10-31 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1427/ 2025-04-11 17:51:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11474...
PT-2024-34517 · Unknown · Phpgurukul Online Dj Booking Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Online DJ Booking Management System version 1.0 Description: A Reflected Cross Site Scripting XSS issue was found in the /odms/admin/user-search.php endpoint, allowing remote attackers to execute arbitrary code via the searchdata...
CVE-2024-44126
creationtimestamp| type| source ---|---|--- 2024-10-28 21:39:11+00:00| seen| None 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:28+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...
CVE-2024-40851
creationtimestamp| type| source ---|---|--- 2024-10-28 21:09:09+00:00| seen| None...
CVE-2024-50610
GSL GNU Scientific Library through 2.8 has an integer signedness error in gslsimansolvemany in siman/siman.c. When params.ntries is negative, incorrect memory allocation occurs...
PT-2024-33038 · Funadmin · Funadmin
Name of the Vulnerable Software and Affected Versions: funadmin version 5.0.2 Description: An issue was found in the selectfiles method in backendcontrollersysAttachh.php, where it directly stores the passed parameters and values into the param parameter without filtering, resulting in Cross Site...
CVE-2024-10313
creationtimestamp| type| source ---|---|--- 2024-10-24 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-298-02 2024-10-24 21:00:26+00:00| seen| https://t.me/cvedetector/8831...
PT-2024-33106 · Assimp +1 · Assimp +1
Name of the Vulnerable Software and Affected Versions: Assimp library affected versions not specified Description: A segmentation fault was detected in the SortByPTypeProcess::Execute function during fuzz testing with AddressSanitizer, caused by a read access to an invalid memory address...
CVE-2024-20481
creationtimestamp| type| source ---|---|--- 2024-10-23 20:45:10+00:00| seen| https://t.me/cvedetector/8753 2024-10-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1406 2024-10-24 07:49:12+00:00| seen| https://t.me/CyberBulletin/1245 2024-10-24 07:49:12+00:00| seen|...
BELL-CVE-2024-47727
Bulletin has no description...
Prototype Pollution json5 Dependency in Confluence Data Center
This High severity json5 Dependency vulnerability was introduced in versions 5.9 of Confluence Data Center. This json5 Dependency vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to expose assets in your environment susceptible to exploitation which has high impact to...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-18081)
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause MySQL Server to hang or crash frequently and repeatedly...
CVE-2024-49885
In the Linux kernel, the following vulnerability has been resolved: mm, slub: avoid zeroing kmalloc redzone Since commit 946fa0dbf2d8 "mm/slub: extend redzone check to extra allocated kmalloc space than requested", setting origsize treats the wasted space objectsize - origsize as a redzone. Howev...
PT-2024-40613 · Git +1 · Wasmtime
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported, characterized as a Segv on an unknown address. The crash state includes references to cranelift filetests::function...
Running user provided regular expression, lead to DOS
This report is not public...
CVE-2024-7755
creationtimestamp| type| source ---|---|--- 2024-10-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-291-04 2024-10-17 21:40:11+00:00| seen| https://t.me/cvedetector/8224...
AWS VDP: Reflected XSS on Amazon EC2 Instance
Product: Amazon Elastic Compute Cloud Amazon EC2 Vulnerability Type: Reflected Cross-Site Scripting XSS CVE: CVE-2022-29548 Severity: Medium Description: A reflected XSS vulnerability was discovered on the Amazon EC2 instance, allowing an attacker to inject malicious JavaScript code, potentially...
CVE-2024-48120
creationtimestamp| type| source ---|---|--- 2024-10-14 16:40:09+00:00| seen| https://t.me/cvedetector/7810 2025-03-28 21:02:10+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3llhpl4tdk52u...