CVE-2024-0692

SolarWinds Security Event Manager (SEM) is affected by CVE-2024-0692 due to a deserialization of untrusted data in the AMF mechanism, enabling unauthenticated remote code execution on adjacent networks. Public sources in connected documents confirm an unauthenticated RCE condition with a high imp...

CVE-2024-27497

Linksys E2000 router (Firmware 1.0.06 build 1) is affected by CVE-2024-27497 due to an authentication bypass in the position.js file. The vulnerability enables unauthorized access to the device. Remediation is to upgrade to a patched firmware version as indicated in the connected documents; explo...

CVE-2024-1698

Summary of CVE-2024-1698 (NotificationX WordPress plugin) : The affected software is the NotificationX plugin for WordPress (versions up to and including 2.8.2). The underlying issue is an SQL Injection vulnerability in the Analytics/REST pathway caused by insufficient escaping of the user-suppli...

CVE-2024-1781

CVE-2024-1781 affects Totolink X6000R AX3000 (firmware 9.4.0cu.852_20230719). The vulnerability is in the shttpd component’s setWizardCfg function (/cgi-bin/cstecgi.cgi) and allows command injection due to insufficient input validation. Public exploit guidance exists, and vendors were reportedly ...

CVE-2024-1212

CVE-2024-1212 Affects Progress Kemp LoadMaster. Unauthenticated attackers can trigger arbitrary command execution via the LoadMaster management interface, with exploits and PoCs published (e.g., through OS command injection on the /access/set endpoint). Public references show active exploitation ...

CVE-2024-1709

CVE-2024-1709 affects ConnectWise ScreenConnect (23.9.7 and earlier). It is an Authentication Bypass Using an Alternate Path or Channel that can grant direct access to confidential information or critical systems. Multiple sources indicate active exploitation and urge patching; ConnectWise releas...

CVE-2024-1708

CVE-2024-1708/1709 affect ConnectWise ScreenConnect (Server 23.9.7 and earlier). A path-traversal flaw (CVE-2024-1708) may allow remote code execution; an authentication-bypass flaw (CVE-2024-1709) enables access without credentials, potentially leading to RCE. Public exploit tooling exists (e.g....

CVE-2203-1709

CVE-2203-1709 (connected to CVE-2024-1709 topic in Attackerkb) affects ConnectWise ScreenConnect 23.9.7 and earlier. The vulnerability is an Authentication Bypass via an Alternate Path or Channel, potentially allowing direct access to confidential information or critical systems. Attacker discuss...

CVE-2024-20953

CVE-2024-20953 affects Oracle Agile PLM (Supply Chain) 9.3.6, specifically the Export component. The Nessus NASL notes this vulnerability allows a low-privileged, network-accessible attacker over HTTP to compromise Oracle Agile PLM, with potential takeover and a CVSS v3.1 base score of 8.8 (C/H, ...

CVE-2024-23113

CVE-2024-23113 is a format-string vulnerability in Fortinet FortiOS, FortiProxy, FortiPAM, and FortiSwitchManager. An attacker can trigger remote code execution by sending specially crafted packets that influence format-string processing in affected components. Affected versions include FortiOS 7...

CVE-2024-21412

CVE-2024-21412 is a Windows SmartScreen security feature bypass that lets a downloaded file, marked by the Mark of the Web (MoTW), execute without SmartScreen prompts when dealing with Internet Shortcut files. Connected sources cite in-the-wild activity (Water Hydra) and exploitation via spearphi...

CVE-2024-21410

CVE-2024-21410 is a Microsoft Exchange Server Elevation of Privilege vulnerability with CVSS v3.1 base score 9.8 (CRITICAL). Affected products include Exchange Server 2016 CU23 and 2019 CU13/CU14. Public exploits exist; there are indications of exploitation in the wild per CISA KEV and vendor adv...

CVE-2024-21413

Summary of CVE-2024-21413 (Microsoft Outlook / Moniker Link): A vulnerability in Outlook where crafted Moniker Link URLs (often via file:///UNC paths) can trigger an automatic SMB access, potentially leaking the user’s NTLM hash to an attacker. Multiple PoCs on GitHub demonstrate delivering malic...

CVE-2024-21351

CVE-2024-21351 is a Windows SmartScreen Security Feature Bypass vulnerability. Public exploits exist; attackers could bypass SmartScreen and inject code, potentially gaining code execution, exposing data, or impacting availability. Relevant advisories note active exploitation and focus on applyin...

CVE-2024-21338

CVE-2024-21338 is a Windows kernel local privilege escalation caused by an exposed IOCTL with insufficient access control in the appid.sys component. The vulnerability enables local attackers with LOW privileges and no user interaction to escalate to kernel to access high-privilege operations (CV...

CVE-2024-22024

CVE-2024-22024 is an XML External Entity (XXE) vulnerability in Ivanti Connect Secure and Ivanti Policy Secure gateways (SAML component) affecting 9.x and 22.x branches, plus ZTA gateways. The issue allows an unauthenticated attacker to access certain restricted resources via SAML-based requests....

CVE-2023-50358

CVE-2023-50358 is an OS command-injection vulnerability affecting multiple QNAP OS lines, including QTS and QuTS variants. The advisory notes that, if exploited, an attacker could execute commands over the network. QNAP has fixed this vulnerability in specific releases: QTS 5.1.5.2645+ (build 202...

CVE-2023-47218

Summary : CVE-2023-47218 is an OS command injection vulnerability affecting QNAP QTS, QuTS Hero, and QuTScloud. The flaw allows unauthenticated users on the local/network path to execute commands remotely via the affected OS components (notably the OS command injection vector reported for QTS/QuT...

CVE-2024-0250

The CVE-2024-0250 entry concerns the Analytics Insights for Google Analytics 4 (AIWP) WordPress plugin, prior to version 6.3. The issue is an Open Redirect caused by insufficient validation on the redirect file oauth2callback.php, enabling unauthenticated attackers to steer users to potentially m...

CVE-2023-50386

CVE-2023-50386 is an Apache Solr vulnerability affecting 6.0.0–8.11.2 and 9.0.0–9.3.x that allows unrestricted uploading of Java jar/class files via the ConfigSets API. When backing up Solr Collections with LocalFileSystemRepository, backup files can land on directories in the Solr ClassLoader, p...