CVE-2023-52251

Kafka UI (Provectus Kafka‑UI) 0.4.0–0.7.1 is exploitable via the q parameter in /api/clusters/local/topics/{topic}/messages, allowing remote code execution through a Groovy script injection in the filterQueryType path. Impact is high (RCE). Remediation available: upgrade to Kafka UI 0.7.2 or late...

CVE-2023-51833

Affected product: TRENDnet TEW-411BRPplus router, firmware v2.07_eu. Vulnerability: command injection via the data1 parameter in the debug.cgi page, allowing a local attacker to execute arbitrary code. Root cause: improper handling of user-controlled input in the debug.cgi endpoint. Impact (per s...

CVE-2024-23897

CVE-2024-23897 affects Jenkins 2.441 and earlier, and LTS 2.426.2 and earlier. The root cause is an enabled args4j-based CLI feature (expandAtFiles) that replaces an @file path in CLI arguments with the file contents, enabling read access to arbitrary files on the Jenkins controller filesystem. P...

CVE-2024-22768

CVE-2024-22768 affects Hitron Systems DVR HVR-4781 (and related models) with an improper input validation vulnerability (CWE-20) in versions 1.03–4.02, exploitable to cause a denial-of-service when default admin credentials are used. Multiple sources corroborate the impact on HVR-4781 and related...

CVE-2024-23222

Summary (CVE-2024-23222) : A type confusion vulnerability in Apple WebKit leads to arbitrary code execution when processing malicious web content. The issue affects multiple Apple platforms and is fixed in versions listed by the sources: iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, and...

CVE-2024-0204

CVE-2024-0204 is a critical authentication-bypass vulnerability in Fortra GoAnywhere MFT prior to 7.4.1. An unauthenticated attacker can trigger a path traversal against the InitialAccountSetup.xhtml endpoint, bypass security filters, and create a new administrator account in the GoAnywhere admin...

CVE-2024-0778

CVE-2024-0778 affects Uniview ISC 2500-S (up to 20210930) via the function setNatConfig in /Interface/DevManage/VM.php. Manipulating the arguments natAddress, natPort, or natServerPort results in OS command injection. The vulnerability has been publicly disclosed and is being observed in the wild...

CVE-2024-0769

CVE-2024-0769 corresponds to a path-traversal vulnerability in D-Link DIR-859 routers (affected file: /hedwig.cgi). Connected sources confirm the issue is triggered by manipulating the service argument with ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml, enabling remote access. The affected...

CVE-2023-6184

CVE-2023-6184 – Citrix Session Recording XSS : The Citrix Session Recording component is affected by a cross-site scripting vulnerability. Affected: Citrix Session Recording on current Release (CR) versions prior to 2311, and Long Term Service Release (LTSR) versions prior to CU8 hotfix 19.12.810...

CVE-2023-5914

CVE-2023-5914 affects Citrix StoreFront. The connected nuclei template confirms a Reflected Cross-Site Scripting issue exploitable without authentication, triggered by coercing an error message during XML parsing in the SSO flow. Impact is unauthenticated users injecting JavaScript to steal crede...

CVE-2023-6549

CVE-2023-6549 : A memory-buffer boundary violation in Citrix NetScaler ADC and NetScaler Gateway allows unauthenticated denial of service and an out-of-bounds memory read when the appliance is configured as a gateway or AAA virtual server. Affected versions include NetScaler ADC/Gateway 14.1 befo...

CVE-2023-6548

CVE-2023-6548 is a Code Injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway. The issue allows authenticated remote code execution on the management interface (NSIP/CLIP/SNIP) due to improper generation of code, affecting the management plane. Exploitation has been observed in th...

CVE-2024-0519

CVE-2024-0519 is a Google Chrome/V8 vulnerability: an out-of-bounds memory access in V8 allows potential heap corruption via a crafted HTML page. Affected products include Chrome before version 120.0.6099.224; the Chromium/Chrome Stable Channel update to 120.0.6099.224 (Linux and Mac) and 120.0.6...

CVE-2024-0235

EventON WordPress Plugin vulnerability CVE-2024-0235 affects both free (<2.2.8) and premium (

CVE-2022-1609

CVE-2022-1609 affects The School Management WordPress plugin prior to version 9.9.7. The obfuscated backdoor is injected in the license checking code and registers a REST API handler, enabling an unauthenticated attacker to execute arbitrary PHP code on the site (RCE). Impact is the ability to ru...

CVE-2023-22527

CVE-2023-22527 is an OGNL/SSTI-based remote code execution vulnerability in Atlassian Confluence Data Center and Server. Affected versions include Confluence Data Center/Server 8.0.x, 8.1.x, 8.2.x, 8.3.x, 8.4.x, and 8.5.0–8.5.3 (per multiple exploits). Anonymous attackers could trigger RCE via a ...

CVE-2023-46805

CVE-2023-46805 describes an authentication bypass in the web component of Ivanti Connect Secure (ICS) and Ivanti Policy Secure gateways (9.x and 22.x). The vulnerability allows an unauthenticated or improperly authenticated actor to access restricted resources by bypassing access controls, per CV...

CVE-2024-21887

CVE-2024-21887 is a command-injection vulnerability in Ivanti Connect Secure and Ivanti Policy Secure web components (9.x, 22.x) that allows an authenticated administrator to craft requests and execute arbitrary commands on the device. The issue affects web components and is tied to OS command-in...

CVE-2023-7028

GitLab CE/EE versions affected are vulnerable to an improper access-control allowing password-reset emails to be sent to unverified addresses, enabling account takeover. CISA KEV notes active exploitation; PoCs and public references exist (Exploit-DB PoC for GitLab

CVE-2023-50919

GL.iNet CVE-2023-50919 describes an NGINX auth-bypass via Lua pattern matching affecting multiple GL.iNet devices (various models and firmware versions up to 4.5.0). A separate Metasploit module (GL.iNet Unauthenticated Remote Command Execution via the logread module) combines this bypass with an...