498 matches found
CVE-2024-49328
creationtimestamp| type| source ---|---|--- 2024-10-20 10:44:06+00:00| seen| https://t.me/cvedetector/8396 2024-11-07 17:02:41+00:00| published-proof-of-concept| https://t.me/CNArsenal/3422 2024-11-07 18:35:05+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/11404...
CVE-2024-10004
Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock icon showing an HTTPS indicator incorrectly This vulnerability affects Firefox for iOS 131.2...
WordPress plugin Simple Calendar 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2024-42322
creationtimestamp| type| source ---|---|--- 2024-08-17 12:17:50+00:00| seen| https://t.me/cvedetector/3390 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
PT-2024-6824 · Sap · Sap Netweaver Application Server Abap
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP affected versions not specified Description: The issue allows an unauthenticated attacker to craft a URL link that could bypass allowlist controls. Depending on the web applications provided by the server...
SUSE CVE-2024-42347
matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. A malicious homeserver could manipulate a user's account data to cause the client to enable URL previews in end-to-end encrypted rooms, in which case any URLs in encrypted messages would be sent to the...
School Attendance Monitoring System和School Event Management System 跨站脚本漏洞
School Event Management System is a school event management system and School Attendance Monitoring System is a school attendance monitoring system. A cross-site scripting vulnerability exists in School Attendance Monitoring System and School Event Management System version 1.0. An attacker can...
Cato Networks Windows SDP Client 安全漏洞
Cato Networks Windows SDP Client is a secure remote access software from Cato Networks, Israel. A security vulnerability exists in Cato Networks Windows SDP Client versions prior to 5.10.34, which stems from code that can be remotely executed via a specially crafted URL...
Quivr Cross-Site Scripting Vulnerability
Quivr is an Artificial Intelligence application from Quivr Open Source. A cross-site scripting vulnerability exists in Quivr that stems from a stored cross-site scripting XSS vulnerability in the Upload Knowledge feature. An attacker exploiting this vulnerability could upload a file via a URL,...
Discourse Security Breach
Discourse is an open source community discussion platform from Discourse Open Source. The platform includes community, email and chat room features. Discourse suffers from a security vulnerability that stems from a carefully crafted malicious URL that degrades availability and leads to a denial o...
CVE-2024-28623
creationtimestamp| type| source ---|---|--- 2024-03-13 09:26:56+00:00| seen| https://t.me/ctinow/206485 2024-03-13 09:26:58+00:00| seen| https://t.me/ctinow/206487 2025-08-19 21:02:34+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwrsq2xp2l2v 2025-11-03 21:02:28+00:00| seen...
CVE-2023-23896
Missing Authorization vulnerability in MyThemeShop URL Shortener by MyThemeShop.This issue affects URL Shortener by MyThemeShop: from n/a through 1.0.17...
CVE-2023-6918
creationtimestamp| type| source ---|---|--- 2024-01-04 07:51:45+00:00| seen| https://t.me/ctinow/162803 2024-01-12 13:12:01+00:00| seen| https://t.me/ctinow/167232 2025-02-15 04:11:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4528 2026-02-19 14:20:24+00:00| seen|...
CVE-2023-48496
Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...
The vulnerability of the Microsoft Power Platform Connector’s application programming interface, related to errors in information representation by the user interface, allows a hacker to perform a spear-phishing attack.
The vulnerability of the Microsoft Power Platform Connector’s application programming interface is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to carry out a spear-phishing attack by sending the user a specially...
PT-2023-7607 · Microsoft · Power Platform Connector
Name of the Vulnerable Software and Affected Versions: Microsoft Power Platform Connector affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can allow a remote attacker to conduct a spoofing attack by sendi...
CVE-2023-46385
LOYTEC electronics GmbH LINX Configurator all versions is vulnerable to Insecure Permissions. An admin credential is passed as a value of URL parameters without encryption, so it allows remote attackers to steal the password and gain full control of Loytec device configuration...
Zyxel NAS326 Operating System Command Injection Vulnerability
Zyxel NAS326 is a cloud storage NAS from China Heqin Zyxel. An operating system command injection vulnerability exists in Zyxel NAS326 V5.21AAZF.14C0 and NAS542 V5.21ABAG.11C0 and prior versions, which stems from incorrect neutralization of a special element that could allow an unauthenticated...
The vulnerability of the Universal Monitoring System Interface of Zabbix, which allows attackers to perform cross-site scripting attacks
The vulnerability of the Zabbix monitoring system’s universal interface is related to insufficient validation of input data during the processing of the URL fields in the Maps elements. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...