CVE-2024-4885

Progress WhatsUp Gold GetFileWithoutZip Directory Traversal (CVE-2024-4885) allows unauthenticated remote code execution. The flaw stems from unvalidated user-supplied paths used in file operations within GetFileWithoutZip, enabling commands to run with iisapppool\nmconsole/service account privil...

CVE-2024-5276

The CVE-2024-5276 entry describes a SQL Injection vulnerability in Fortra FileCatalyst Workflow that affects all versions up to 5.1.6 Build 135 (and earlier). The underlying issue allows an attacker to modify application data, including potentially creating administrative users and deleting/modif...

CVE-2024-5806

CVE-2024-5806 affects the MOVEit Transfer SFTP module. The issue is an Improper Authentication vulnerability that can lead to an Authentication Bypass . Affected versions include MOVEit Transfer 2023.0.x prior to 2023.0.11, 2023.1.x prior to 2023.1.6, and 2024.0.x prior to 2024.0.2. Root cause is...

CVE-2024-37085

CVE-2024-37085 affects VMware ESXi via an authentication bypass in domain-joined configurations. An actor with sufficient AD permissions can gain full admin access by re-creating a configured AD group (commonly named ESXi Admins or ESX Admins) after deletion. Multiple sources note exploitation ac...

CVE-2024-6028

The CVE-2024-6028 issue affects the WordPress Quiz Maker plugin up to version 6.5.8.3, where a time-based SQL Injection is possible through the ays_questions parameter due to insufficient escaping and query preparation. This unauthenticated attacker could append arbitrary SQL to extract sensitive...

CVE-2024-4841

LoLLMS WebUI (parisneo/lollms-webui) is affected by a Path Traversal vulnerability in the add_reference_to_local_mode function, arising from lack of input sanitization. Exploitation targets the path parameter in HTTP requests to the /add_reference_to_local_model endpoint, enabling an attacker to ...

CVE-2024-6188

CVE-2024-6188 affects Parsec Automation TrackSYS 11.x.x. The issue involves processing of the file /TS/export/pagedefinition where manipulation of an argument ID leads to a direct request, allowing a remote attack. Public exploit information is present in the sources and a number of feeds referen...

CVE-2024-3605

The CVE-2024-3605 entry concerns the WordPress plugin WP Hotel Booking (versions up to and including 2.1.0) and describes an SQL Injection flaw in the /wphb/v1/rooms/search-rooms REST API endpoint, exploitable via the room_type parameter. The root cause is insufficient escaping of the user-suppli...

CVE-2024-36117

Reposilite v3.5.10 is affected by an Arbitrary File Read via path traversal when serving expanded javadoc files. The vulnerability stems from the path parameter used to locate resources under javadocUnpackPath, allowing traversal sequences to escape the intended directory and access sensitive fil...

CVE-2023-47783

CVE-2023-47783 is a Missing Authorization (Broken Access Control) vulnerability in Thrive Theme Builder up to version 3.23.x (before 3.24.0). The issue affects Thrive Theme Builder and is caused by a missing capability check in a function, enabling authenticated users with subscriber-level access...

CVE-2024-37079

CVE-2024-37079 is a VMware vCenter Server DCERPC heap-out-of-bounds/write vulnerability with remote code execution potential when a network-accessible vCenter receives crafted packets. Affected component: vCenter Server (DCERPC workflow). Root cause: heap overflow/out-of-bounds write in the DCERP...

CVE-2024-6047

CVE-2024-6047 affects GeoVision end-of-life devices. A failure to properly filter input enables OS command injection via unauthenticated remote access (e.g., through the /DateSetting.cgi endpoint), allowing arbitrary command execution with high impact (CVE severity rated up to 9.8 by TWCERT/CTW)....

CVE-2024-32896

The CVE-2024-32896 issue is a local Elevation of Privilege (EoP) in the Android Framework affecting Pixel devices, caused by a logic error that could enable privilege escalation with no extra execution privileges. Exploitation requires user interaction per the description, with the Android bullet...

CVE-2024-34102

CVE-2024-34102 is an XXE vulnerability in Adobe Commerce/Magento Open Source that allows remote code execution. The issue affects Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier, via improper restriction of XML external entity references. Exploitation can occur without use...

CVE-2024-4845

CVE-2024-4845 affects the Icegram Express plugin for WordPress, vulnerable to SQL Injection via the sensitive parameter options[list_id] in all versions up to and including 5.7.22. The root cause is insufficient escaping of the user-supplied value and inadequate preparation of the existing SQL qu...

CVE-2024-30090

CVE-2024-30090 is an elevation-of-privilege vulnerability affecting the Windows Kernel Streaming framework, specifically the msrks.ks.sys component used for processing streaming data (e.g., microphone/webcam input). The public materials indicate exploitation potential via a memory-bounds/buffer h...

CVE-2024-30088

CVE-2024-30088 is a Windows Kernel TOCTOU race condition that can lead to local privilege escalation via AuthzBasepCopyoutInternalSecurityAttributes. Publicly discussed exploits and PoCs exist (Windows kernel LPE PoCs and Metasploit module), and CISA lists it as a known-exploited vulnerability; a...

CVE-2024-35250

CVE-2024-35250 is a Windows kernel‑mode driver LPE in ks.sys (Kernel Streaming core) caused by an untrusted pointer dereference. PoCs and exploits exist (e.g., PoCs on GitHub; KS driver) with active demonstrations, and exploitation has been observed in public material. Microsoft addressed the iss...

CVE-2024-2473

CVE-2024-2473 : The WordPress plugin WPS Hide Login is vulnerable to a Login Page Disclosure in all versions up to and including 1.9.15.2 due to a bypass triggered when the query parameter action=postpass is supplied. This bypass allows unauthenticated attackers to discover the actual hidden logi...

CVE-2024-36412

Summary of CVE-2024-36412 (SuiteCRM) : Affected are SuiteCRM versions prior to 7.14.4 and 8.6.1. The issue is a vulnerability in the events response entry point that enables an unauthenticated SQL injection. The Nuclei template and CVE records describe an unauthenticated, time-based SQL injection...