CVE-2024-8957

PTZOptics PT30X-SDI/NDI-xx devices running firmware prior to 6.3.40 are vulnerable to an OS command injection via the ntp_addr parameter in ntp_client, enabling a remote, unauthenticated attacker to execute arbitrary commands on affected cameras. This CVE (CVE-2024-8957) is paired with CVE-2024-8...

CVE-2024-8956

PTZOptics PT30X-SDI/NDI-xx devices prior to firmware 6.3.40 are affected by an insufficient authentication vulnerability in /cgi-bin/param.cgi, enabling remote, unauthenticated data leakage (usernames, password hashes, configurations) and the ability to update individual settings or overwrite the...

CVE-2024-38813

CVE-2024-38813 : Privilege-escalation in VMware vCenter Server. A remote attacker with network access could trigger a flaw by sending a specially crafted packet to escalate to root. NVD lists CVSS v3.1 base score 9.8 (CRITICAL) with network access, no user interaction. Related documents also desc...

CVE-2024-38812

CVE-2024-38812 : VMware vCenter Server is affected by a heap-based buffer overflow in the DCERPC protocol. A remote attacker with network access can trigger code execution by sending a specially crafted network packet. The CVE is tracked across multiple advisories and has several patched / update...

CVE-2024-8752

WebIQ 2.15.9 on Windows is vulnerable to an unauthenticated directory traversal allowing remote attackers to read arbitrary files. The Nuclei template specifics: affected component is WebIQ 2.15.9 (Windows), vulnerability type directory traversal, impact is filesystem read access. The documented ...

CVE-2024-46938

CVE-2024-46938 affects Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) 8.0 Initial Release through 10.4 Initial Release. An unauthenticated attacker can read arbitrary files due to an improper path access check in the affected Sitecore components. Affected...

CVE-2024-6587

LiteLLM is affected by a Server-Side Request Forgery (SSRF) in the chat/completions endpoint. The vulnerability arises from using an attacker-controlled api_base, causing requests to be sent to an arbitrary domain and potentially exposing the OpenAI API key in the Authorization header. Affected v...

CVE-2024-38816

CVE-2024-38816 affects Spring Framework components that serve static resources via RouterFunctions (WebMvc.fn/WebFlux.fn) and a FileSystemResource location. Exploitation targets path traversal to read files accessible to the app process. According to IBM/VMware sources, the vulnerability is mitig...

CVE-2024-8522

LearnPress WordPress LMS Plugin (= 4.2.7.1) or apply vendor-supplied security fixes. Technical details and PoCs are available in multiple connected sources (e.g., nuclei template, Exploit DB, Metasploit module).

CVE-2024-8529

CVE-2024-8529 – LearnPress : The LearnPress WordPress LMS Plugin (versions ≤ 4.2.7) is vulnerable to unauthenticated SQL injection via the c_fields parameter in the /wp-json/lp/v1/courses/archive-course REST API. This is due to insufficient escaping and lack of proper SQL query preparation, allow...

CVE-2024-20483

CVE-2024-20483 involves multiple vulnerabilities in Cisco Routed PON Controller Software (Docker container on Cisco IOS XR hardware) where insufficient validation of arguments to configuration commands can allow an authenticated, admin-level attacker on the PON Manager or direct access to its Mon...

CVE-2024-8190

CVE-2024-8190 is an OS command injection in Ivanti Cloud Services Appliance (CSA) before patch 519 (CSA 4.6 and earlier), enabling remote code execution for an attacker with admin-level privileges (authenticated). Public proofs-of-concept and exploit code exist (e.g., GitHub and Horizon3.ai repos...

CVE-2024-45409

CVE-2024-45409 affects the Ruby-SAML library used for SAML client functionality. Ubuntu/Debian advisories and IBM/GitHub entries confirm that versions <= 12.2 and 1.13.0

CVE-2024-43491

CVE-2024-43491 is a Windows Servicing Stack vulnerability that reintroduced vulnerabilities affecting Optional Components on Windows 10 version 1507 for systems with March 2024 KB5035858 or updates through August 2024. The issue is addressed by applying the September 2024 Servicing Stack Update K...

CVE-2024-43461

CVE-2024-43461 — Windows MSHTML Platform Spoofing Vulnerability : A UI misrepresentation in MSHTML that can be used to spoof a web page. Affected component: Windows MSHTML Platform. Underlying issue is a UI spoofing flaw; CVSSv3.1 score 8.8 ( NETWORK, LOW, NONE, UI: REQUIRED; Confidentiality/Inte...

CVE-2024-38226

CVE-2024-38226 is a Microsoft Publisher security feature bypass vulnerability that enables bypass of Mark of the Web protections. The issue affects Microsoft Publisher (and related Office components) and stems from a security feature bypass in MOWeb, allowing files downloaded from the Internet to...

CVE-2024-38217

CVE-2024-38217 is a security feature bypass in Microsoft Windows Mark of the Web (MOTW). The vulnerability allows bypassing MOTW protections when opening booby-trapped Office files, as discussed in multiple sources. Exploitation details are not fully disclosed in the provided documents, but the C...

CVE-2024-38014

CVE-2024-38014 is a Windows Installer privilege-escalation vulnerability (local, CVSSv3.1: 7.8) that could allow an attacker with low privileges to gain SYSTEM-level access. The issue targets the Windows Installer component and is described in sources as an improper privilege-management flaw. Pub...

CVE-2024-44849

Qualitor # Answer with one JSON object as required. The insight is in Markdown format and concise. If you need a shorter version, I can provide it. However, ensure it adheres to the given structure. Nonetheless, this retains all supported factual details from the documents. If you'd like me to ta...

CVE-2024-44902

ThinkPHP 6.1.3–8.0.4 is vulnerable to insecure deserialization that leads to remote code execution when the Memcached PHP extension is installed. The exploit chain described in the connected exploit document involves deserializing user input via unserialize() through internal classes: ResourceReg...