CVE-2024-5910

CVE-2024-5910 affects Palo Alto Networks Expedition (versions prior to 1.2.92). The issue is missing authentication for a critical function, enabling an attacker with network access to potentially takeover an Expedition admin account and exfiltrate configuration secrets and credentials. Public so...

CVE-2024-5217

ServiceNow CVE-2024-5217 is an input-validation vulnerability in Now Platform’s GlideExpression script: an unauthenticated user can exploit an incomplete disallowed-input list to achieve remote code execution. The issue affects Washington DC, Vancouver, and earlier releases, with patches/hot fixe...

CVE-2024-4879

CVE-2024-4879 affects ServiceNow Now Platform (Vancouver/Washington DC/Utah releases). It is an input-validation/template-injection flaw enabling unauthenticated remote code execution with network access and no user interaction, per multiple sources. The issue has high-severity CVSS values (aroun...

CVE-2024-38094

CVE-2024-38094 is a Microsoft SharePoint deserialization vulnerability that allows remote code execution. Connected sources indicate an authenticated attacker with Site Owner permissions can inject and execute arbitrary code on the SharePoint server, with exploit activity noted in the wild (CISA ...

CVE-2024-38112

CVE-2024-38112 Windows MSHTML Platform Spoofing is a Windows/MSHTML vulnerability exploited in the wild by the Void Banshee group. The issue involves spoofing UI within the MSHTML/IE rendering path, enabling code execution when a user opens a crafted .url payload that references an embedded MHTML...

CVE-2024-38080

CVE-2024-38080 is a Windows Hyper-V Elevation of Privilege issue documented by Microsoft (MSRC) and listed by CISA as a Known Exploited vulnerability. Public sources name Windows Hyper-V as the affected component and cite Windows Server 2022 and Windows 11 variants (various versions) as impacted....

CVE-2024-6365

CVE-2024-6365 affects Product Table by WBW for WordPress (wp-plugin). All versions up to 2.0.1 are vulnerable to unauthenticated Remote Code Execution via the saveCustomTitle function, caused by missing authorization and lack of sanitization of appended data in languages/customTitle.php. Impact p...

CVE-2023-50381

CVE-2023-50381 concerns Realtek rtl819x Jungle SDK v3.4.11 (Boa web server) used in LevelOne WBR-6013 and related devices. The flaw occurs in the boa formWsc API, where the targetAPSsid parameter (and related inputs) can be unsafely incorporated into system commands, enabling OS command injection...

CVE-2024-29510

CVE-2024-29510 affects Ghostscript before 10.03.1, enabling memory corruption and SAFER sandbox bypass via a format string injection in the uniprint device. The issue is addressed in Ghostscript 10.03.1; affected advisories (e.g., ALAS/AL2024 updates) recommend upgrading Ghostscript to mitigate r...

CVE-2024-39891

CVE-2024-39891 describes a information-disclosure bug in the Twilio Authy API: an unauthenticated endpoint accepts a stream of phone numbers and returns whether each is registered with Authy. Affected software is Twilio Authy on Android before 25.1.0 and iOS before 26.1.0. The vulnerability was e...

CVE-2024-38475

CVE-2024-38475 affects Apache HTTP Server 2.4.59 and earlier, where improper escaping of output in mod_rewrite can map URLs to filesystem locations that are served but not directly reachable, enabling remote code execution or source code disclosure. The issue also involves substitutions in server...

CVE-2024-36991

CVE-2024-36991 is a path traversal vulnerability in Splunk Enterprise on Windows, affecting versions below 9.2.2, 9.1.5, and 9.0.10. The flaw resides in the /modules/messaging/ endpoint, enabling an unauthenticated attacker to read arbitrary files through crafted requests (e.g., Windows drive-let...

CVE-2024-20399

Cisco NX-OS Software contains a CLI command injection vulnerability (CVE-2024-20399) that could allow an authenticated administrator to execute arbitrary root commands on the underlying OS. The issue arises from insufficient validation of parameters passed to specific configuration CLI commands, ...

CVE-2024-36420

Flowise 1.4.3 is vulnerable to arbitrary file read via POST /api/v1/openai-assistants-file due to lack of sanitization of the fileName parameter in index.ts. Exploitation is demonstrated in multiple sources (e.g., nuclei templates and GitHub PoCs) showing reading /etc/passwd when sending crafted ...

CVE-2024-36401

GeoServer (open source geospatial server) is affected by CVE-2024-36401, stemming from GeoTools’ unsafe evaluation of property/attribute names as XPath expressions. This leads to Remote Code Execution (RCE) when unauthenticated users craft input that triggers the evaluation path. Impact applies t...

CVE-2024-6387

CVE-2024-6387 is a remote code-execution vulnerability in OpenSSH’s server (sshd) caused by a race condition in a signal handler that may run after a client fails to authenticate within LoginGraceTime. The issue is exploitable by an unauthenticated, remote attacker on glibc-based Linux systems, p...

CVE-2024-6265

CVE-2024-6265 affects the WordPress plugin UsersWP (Front-end login, registration, profile, members directory). The vulnerability is a time-based SQL Injection caused by insufficient escaping of the uwp_sort_by parameter in all versions up to and including 1.2.10 , allowing unauthenticated attack...

CVE-2024-5827

Vanna v0.3.4 is affected by an SQL injection in the DuckDB integration exposed through its Flask Web APIs. The vulnerability allows attackers to inject malicious SQL training data and craft queries that can write arbitrary files to the file system (e.g., backdoor.php with contents ), potentially ...

CVE-2024-38514

NextChat (UI for ChatGPT/Gemini) is affected by a Server-Side Request Forgery (SSRF) flaw in the WebDav API endpoint caused by missing validation of the GET parameter endpoint. The issue enables unauthenticated actors to trigger arbitrary HTTPS requests (MKCOL, PUT, GET) from the vulnerable insta...

CVE-2024-6250

Summary (fact-grounded): CVE-2024-6250 affects parisneo/lollms-webui version 9.6. The vulnerability is an absolute path traversal in the open_file endpoint of lollms_advanced.py, where the sanitize_path function with allow_absolute_path=True enables reading arbitrary files and listing directories...