{"vulnerability": "2024-68", "sightings": [{"uuid": "ff138860-03ec-41de-a18b-9ae764f77ee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6861", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113436599869560909", "content": "", "creation_timestamp": "2024-11-06T14:59:09.814623Z"}, {"uuid": "d2d1cb3b-83b1-48f3-b720-b1c0cc2f4f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6871", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1486/", "content": "", "creation_timestamp": "2024-11-12T06:00:00.000000Z"}, {"uuid": "3c023ab6-879a-4436-8b03-e5eba582e362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-6831", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113548044487102223", "content": "", "creation_timestamp": "2024-11-26T07:20:59.853477Z"}, {"uuid": "beb42f89-3381-4ad4-ab46-56c33a4324cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6816", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113529138857041290", "content": "", "creation_timestamp": "2024-11-22T23:13:02.807611Z"}, {"uuid": "f5919a6c-9ae1-4b12-9222-17ccdd355294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6817", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113529138870842993", "content": "", "creation_timestamp": "2024-11-22T23:13:02.964237Z"}, {"uuid": "3d0283aa-e430-4d8f-9f19-d4d70f47c092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6876", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-02", "content": "", "creation_timestamp": "2024-11-21T11:00:00.000000Z"}, {"uuid": "c8e09c64-9b45-4e8a-ab08-316c031def34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6815", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113529079853878181", "content": "", "creation_timestamp": "2024-11-22T22:58:02.638078Z"}, {"uuid": "a375418e-6260-42b1-ab9f-cba8bbb8aace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-6800", "type": "seen", "source": "https://t.me/ZerodayAlert/305", "content": "", "creation_timestamp": "2026-07-07T00:00:07.358104Z"}, {"uuid": "876c5c42-fc3e-4d93-ab8c-5b3680584647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6880", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113805349530967419", "content": "", "creation_timestamp": "2025-01-10T17:57:03.298499Z"}, {"uuid": "cf450da1-9555-4d76-9ed4-3175c6dd4b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6880", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffsfcjcd62k", "content": "", "creation_timestamp": "2025-01-10T18:16:05.924664Z"}, {"uuid": "14a3d686-888c-49b6-b35d-10c34f237b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6880", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffujihs362k", "content": "", "creation_timestamp": "2025-01-10T18:54:17.339647Z"}, {"uuid": "b64b7fed-d863-4773-82d1-f477cb0095ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6886", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lh2vh5wuv627", "content": "", "creation_timestamp": "2025-01-31T21:01:55.989009Z"}, {"uuid": "a0dd7698-58a2-49ab-92bc-a7e70c2b5ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6839", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lksrid6ije2a", "content": "", "creation_timestamp": "2025-03-20T13:10:28.380323Z"}, {"uuid": "297b211d-3774-4480-b5ab-63f821d18bf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6893", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-22)", "content": "", "creation_timestamp": "2025-02-22T00:00:00.000000Z"}, {"uuid": "1c5287e9-6745-4794-8115-1aac294798d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6892", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-6892.yaml", "content": "", "creation_timestamp": "2025-03-11T11:09:04.000000Z"}, {"uuid": "6bfb9ee1-eab7-4416-8483-97d1f71c21ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6829", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhjr7h52v", "content": "", "creation_timestamp": "2025-03-20T11:40:33.350294Z"}, {"uuid": "50880f7b-fcc0-467f-881d-8e7f9de521a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6892", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lkbyl7fzyg2c", "content": "", "creation_timestamp": "2025-03-13T21:02:11.273969Z"}, {"uuid": "44151d60-fc93-406b-b121-8cf9323be0b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6857", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmehvsrtvu2v", "content": "", "creation_timestamp": "2025-04-09T07:32:10.616282Z"}, {"uuid": "27b78cf8-2072-4543-a90e-76c4f1da2a36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6860", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmehvtbty42g", "content": "", "creation_timestamp": "2025-04-09T07:32:12.408672Z"}, {"uuid": "b57533bf-6729-4011-9ba5-da763019521a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6839", "type": "seen", "source": "https://gist.github.com/EbonJaeger/4959b52b5b6898ca4e109d36bb8b6d36", "content": "", "creation_timestamp": "2025-05-23T22:39:43.000000Z"}, {"uuid": "9bccf184-90b6-44d4-8004-6dc142502018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6844", "type": "seen", "source": "https://gist.github.com/EbonJaeger/4959b52b5b6898ca4e109d36bb8b6d36", "content": "", "creation_timestamp": "2025-05-23T22:39:43.000000Z"}, {"uuid": "d0decc09-d4ad-4860-b86a-e6f24795b871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6866", "type": "seen", "source": "https://gist.github.com/EbonJaeger/4959b52b5b6898ca4e109d36bb8b6d36", "content": "", "creation_timestamp": "2025-05-23T22:39:43.000000Z"}, {"uuid": "4fc0b7d5-4c08-4f85-8012-fd518f235f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6807", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115305897560183033", "content": "", "creation_timestamp": "2025-10-02T18:06:09.012196Z"}, {"uuid": "c9cbc519-3cb6-4349-9f47-f07beb2aa67d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6829", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "375a165e-f0c4-4d27-82b3-2b62cf2b763a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6874", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06", "content": "", "creation_timestamp": "2026-02-12T11:00:00.000000Z"}, {"uuid": "4e3df934-8b8c-4d95-ba25-5fae9b8fbb20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-6841", "type": "seen", "source": "https://gist.github.com/YLChen-007/abb09c98a9a546ee8769b50921e5cb92", "content": "", "creation_timestamp": "2026-02-26T08:15:41.000000Z"}, {"uuid": "5533b90b-2b53-4eab-8438-ea67fc817013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-6841", "type": "seen", "source": "https://gist.github.com/YLChen-007/907b92d59518e30cf34bfb882a7c3b51", "content": "", "creation_timestamp": "2026-02-26T08:46:37.000000Z"}, {"uuid": "2de12c08-d75f-4fa5-8145-25f330be3377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-6841", "type": "seen", "source": "https://gist.github.com/YLChen-007/7b6dc9df2d681ee77df88f683ee471d8", "content": "", "creation_timestamp": "2026-02-26T08:46:36.000000Z"}, {"uuid": "3ce372a6-c686-4e38-be99-a560e841f3a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-6841", "type": "seen", "source": "https://gist.github.com/YLChen-007/48b86c2365e5ebf6923d5f14491b4329", "content": "", "creation_timestamp": "2026-02-27T05:41:46.000000Z"}, {"uuid": "3fc92a3d-407b-43aa-b5a2-6b428f19b3b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6893", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8284", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aMass Exploit < [CVE-2024-6893/CWE-611 - Journyx] - XML External Entities Injection (XXE) Exploit\nURL\uff1ahttps://github.com/codeb0ss/CVE-2024-6893-PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-17T22:49:44.000000Z"}, {"uuid": "56f536fa-1c48-4f74-b00b-ba9dc7ec93bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6810", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5482", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-6810\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Quiz Organizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-02-26T11:12:33.394Z\n\ud83d\udccf Modified: 2025-02-26T11:12:33.394Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/651646b0-231f-401c-9f6d-d414609bd7ba?source=cve\n2. https://plugins.trac.wordpress.org/browser/quiz-organizer/trunk/src/includes/admin/admin-modify-quiz.php#L230\n3. https://plugins.trac.wordpress.org/browser/quiz-organizer/trunk/src/includes/admin/admin-modify-quiz.php#L570\n4. https://wordpress.org/plugins/quiz-organizer/#developers\n5. https://plugins.trac.wordpress.org/browser/quiz-organizer/trunk/src/includes/sets/class-qzorg-plug-shortcode.php#L508", "creation_timestamp": "2025-02-26T11:35:57.000000Z"}, {"uuid": "54738821-384b-4b7e-82aa-92ba0444874c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6825", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8187", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-6825\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: BerriAI/litellm version 1.40.12 contains a vulnerability that allows remote code execution. The issue exists in the handling of the 'post_call_rules' configuration, where a callback function can be added. The provided value is split at the final '.' mark, with the last part considered the function name and the remaining part appended with the '.py' extension and imported. This allows an attacker to set a system method, such as 'os.system', as a callback, enabling the execution of arbitrary commands when a chat response is processed.\n\ud83d\udccf Published: 2025-03-20T10:11:36.172Z\n\ud83d\udccf Modified: 2025-03-20T10:11:36.172Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/1d98bebb-6cf4-46c9-87c3-d3b1972973b5", "creation_timestamp": "2025-03-20T10:19:26.000000Z"}, {"uuid": "c95e3afa-f4d8-4add-a247-84ab5d032f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6875", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9484", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-6875\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API.\n\ud83d\udccf Published: 2025-03-28T20:34:30.859Z\n\ud83d\udccf Modified: 2025-03-28T20:34:30.859Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-6875\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2298555", "creation_timestamp": "2025-03-28T21:29:19.000000Z"}, {"uuid": "6f11e78f-35a9-4b8a-8eeb-a484ab49e339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6857", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11025", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-6857\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP MultiTasking  WordPress plugin through 0.1.12 does not have CSRF check when updating its Header, Footer and Body Script Settings, which could allow attackers to make logged admins perform such action via a CSRF attack\n\ud83d\udccf Published: 2025-04-09T06:00:04.059Z\n\ud83d\udccf Modified: 2025-04-09T06:00:04.059Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/97636602-2dd0-465b-b6dc-acb42147edb3/", "creation_timestamp": "2025-04-09T06:48:32.000000Z"}, {"uuid": "d52eda5a-7806-420b-b2e6-0907a8862b96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6860", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11024", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-6860\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP MultiTasking  WordPress plugin through 0.1.12 does not have CSRF check when updating its permalink suffix settings, which could allow attackers to make logged admins perform such action via a CSRF attack\n\ud83d\udccf Published: 2025-04-09T06:00:05.104Z\n\ud83d\udccf Modified: 2025-04-09T06:00:05.104Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/1d09d3dd-aa49-4ff1-80e7-6d176e378916/", "creation_timestamp": "2025-04-09T06:48:31.000000Z"}, {"uuid": "edf8837b-26e7-4773-8828-158b7bc5a484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6807", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17835", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-6807\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /sscdms/classes/Users.php?f=save of the component HTTP POST Request Handler. The manipulation of the argument firstname/middlename/lastname/username leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2024-07-17T03:31:05.059Z\n\ud83d\udccf Modified: 2025-06-10T07:14:14.502Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.271706\n2. https://vuldb.com/?ctiid.271706\n3. https://vuldb.com/?submit.374853\n4. https://vuldb.com/?submit.374859\n5. https://vuldb.com/?submit.374861\n6. https://vuldb.com/?submit.374923\n7. https://reports.kunull.net/CVEs/2024/CVE-2024-6807\n8. https://www.sourcecodester.com/", "creation_timestamp": "2025-06-10T07:30:58.000000Z"}, {"uuid": "3c5edfbc-dc57-4a1d-8e19-39dbcd55f38e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6857", "type": "seen", "source": "https://t.me/cvedetector/22542", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6857 - WordPress WP MultiTasking CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6857 \nPublished : April 9, 2025, 6:15 a.m. | 1\u00a0hour, 45\u00a0minutes ago \nDescription : The WP MultiTasking  WordPress plugin through 0.1.12 does not have CSRF check when updating its Header, Footer and Body Script Settings, which could allow attackers to make logged admins perform such action via a CSRF attack \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-09T10:04:57.000000Z"}, {"uuid": "96d96488-139e-4c3d-9ce6-8a4197ac976f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6860", "type": "seen", "source": "https://t.me/cvedetector/22541", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6860 - WordPress WP MultiTasking CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-6860 \nPublished : April 9, 2025, 6:15 a.m. | 1\u00a0hour, 45\u00a0minutes ago \nDescription : The WP MultiTasking  WordPress plugin through 0.1.12 does not have CSRF check when updating its permalink suffix settings, which could allow attackers to make logged admins perform such action via a CSRF attack \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-09T10:04:56.000000Z"}, {"uuid": "dc8b9c71-1655-49d9-a6a3-f1a59d2bcc5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6875", "type": "seen", "source": "https://t.me/cvedetector/21485", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6875 - Red Hat Data Grid Infinispan Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-6875 \nPublished : March 28, 2025, 9:15 p.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T00:27:04.000000Z"}, {"uuid": "630c3dea-cc85-491b-ae10-d58bc8d8d27a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6800", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/3522", "content": "#exploit\n1. CVE-2024-40711:\nVeeam Backup & Response - RCE\nhttps://labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-without-auth-cve-2024-40711-2\n\n2. CVE-2024-28000:\nLiteSpeed Cache Privilege Escalation\nhttps://github.com/Alucard0x1/CVE-2024-28000\n\n3. CVE-2024-6800:\nGHES Authentication Bypass\nhttps://cyble.com/blog/saml-exploit-github-cve-2024-6800", "creation_timestamp": "2024-09-10T10:01:29.000000Z"}, {"uuid": "a8e27782-2243-4b58-9058-f30338e511f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6800", "type": "seen", "source": "Telegram/Ld6VKvYxBlV2RSqa-KvoX_kaiEwmlQf1KLu5k-IwDs_KmA", "content": "", "creation_timestamp": "2024-08-22T09:49:51.000000Z"}, {"uuid": "283b5851-fb43-48a2-a465-8309d1f2df77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6880", "type": "seen", "source": "https://t.me/cvedetector/14983", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6880 - \"MegaBIP Disclosure of Administrative Portal Path\"\", \n  \"Content\": \"CVE ID : CVE-2024-6880 \nPublished : Jan. 10, 2025, 6:15 p.m. | 19\u00a0minutes ago \nDescription : During MegaBIP installation process, a user is encouraged to change a default path to administrative portal, as keeping it secret is listed by the author as one of the protection mechanisms.\u00a0  \nPublicly available source code of \"/registered.php\" discloses that path, allowing an attacker to attempt further attacks.\u00a0\u00a0  \n  \nThis issue affects MegaBIP software versions below 5.15 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T19:41:23.000000Z"}, {"uuid": "28bb0187-c5ed-4c78-9672-4254dcaca27f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6800", "type": "seen", "source": "https://t.me/cibsecurity/79242", "content": "\ud83e\udd85 The SAML Exploit That Could Take Down GitHub: What You Need to Know About CVE-2024-6800 \ud83e\udd85\n\n  Key Takeaways\u00a0    CVE20246800 is a severe security flaw discovered in GitHub Enterprise Server GHES, which could allow unauthorized access and control over sensitive systems by exploiting XML signature wrapping and forged SAML responses.\u00a0     The vulnerability impacts all GHES versions prior to 3.14, excluding versions 3.13.3, 3.12.8, 3.11.14, and 3.10.16, indicating that many installations could be at risk.\u00a0     Exploiting this vulnerability can grant attackers unauthorized access to GHES instances, enabling them to view, modify, or delete critical source code and sensitive data and potentially compromising entire supply chains.\u00a0     GHES instances are often accessible over the internet, which broadens the attack surface and increases the likelihood of exploitation, emphasizing the n...\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"CYBLE\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2024-08-26T17:20:16.000000Z"}, {"uuid": "96a4d2dd-0596-40cc-8f22-1f4fa34edd6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6868", "type": "seen", "source": "https://t.me/cvedetector/9324", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6868 - Mudler LocalAI File Write Arbitrary File Write\", \n  \"Content\": \"CVE ID : CVE-2024-6868 \nPublished : Oct. 29, 2024, 1:15 p.m. | 22\u00a0minutes ago \nDescription : mudler/LocalAI version 2.17.1 allows for arbitrary file write due to improper handling of automatic archive extraction. When model configurations specify additional files as archives (e.g., .tar), these archives are automatically extracted after downloading. This behavior can be exploited to perform a 'tarslip' attack, allowing files to be written to arbitrary locations on the server, bypassing checks that normally restrict files to the models directory. This vulnerability can lead to remote code execution (RCE) by overwriting backend assets used by the server. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T14:46:49.000000Z"}, {"uuid": "5ef7635e-b894-445b-8743-5fcb576f5403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6861", "type": "seen", "source": "https://t.me/cvedetector/10008", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6861 - Foreman GraphQL API Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6861 \nPublished : Nov. 6, 2024, 3:15 p.m. | 15\u00a0minutes ago \nDescription : A disclosure of sensitive information flaw was found in foreman via the GraphQL API. If the introspection feature is enabled, it is possible for attackers to retrieve sensitive admin authentication keys which could result in a compromise of the entire product's API. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T16:40:07.000000Z"}, {"uuid": "3ceb43e2-e72a-416c-9c59-3f6f8ef1b5eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6826", "type": "seen", "source": "https://t.me/cvedetector/8785", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6826 - \"GitLab Denial of Service XML Manifest File Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-6826 \nPublished : Oct. 24, 2024, 10:15 a.m. | 20\u00a0minutes ago \nDescription : An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 17.3.6, 17.4 before 17.4.3, and 17.5 before 17.5.1. A denial of service could occur via importing a malicious crafted XML manifest file. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-24T12:38:12.000000Z"}, {"uuid": "c1688657-b68a-4009-bb8a-3a0884f93d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6845", "type": "seen", "source": "https://t.me/cvedetector/6290", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6845 - \"ChatGPT WordPress OpenAI API Key Exposure Remote Unauthorized Access Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-6845 \nPublished : Sept. 25, 2024, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The Chatbot with ChatGPT WordPress plugin before 2.4.6 does not have proper authorization in one of its REST endpoint, allowing unauthenticated users to retrieve the encoded key and then decode it, thereby leaking the OpenAI API key \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-25T09:17:58.000000Z"}, {"uuid": "0e947c2a-2475-48c1-a2ed-203ed1b9572b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6876", "type": "seen", "source": "https://t.me/cvedetector/5258", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6876 - Siemens OSCAT Basic Library Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6876 \nPublished : Sept. 10, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : Out-of-Bounds read vulnerability in OSCAT Basic Library allows an local, unprivileged attacker to access limited internal data of the PLC which may lead to a crash of the affected service. \nSeverity: 5.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-10T19:15:36.000000Z"}, {"uuid": "208d1f70-84ec-484a-a50a-5a55f306a1b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6877", "type": "seen", "source": "https://t.me/cvedetector/5980", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6877 - Eliz Software Panel Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6877 \nPublished : Sept. 18, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Reflected XSS.This issue affects Panel: before v2.3.24. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T17:35:07.000000Z"}, {"uuid": "341a1b1b-b0a8-4895-a27d-bba67796c920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6867", "type": "seen", "source": "https://t.me/cvedetector/5626", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6867 - Lunary Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-6867 \nPublished : Sept. 13, 2024, 5:15 p.m. | 17\u00a0minutes ago \nDescription : An information disclosure vulnerability exists in the lunary-ai/lunary, specifically in the `runs/{run_id}/related` endpoint. This endpoint does not verify that the user has the necessary access rights to the run(s) they are accessing. As a result, it returns not only the specified run but also all runs that have the `run_id` listed as their parent run. This issue affects the main branch, commit a761d833. The vulnerability allows unauthorized users to obtain information about non-public runs and their related runs, given the `run_id` of a public or non-public run. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T19:38:21.000000Z"}, {"uuid": "59724bfe-0af6-47c3-8804-88f718d77127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6862", "type": "seen", "source": "https://t.me/cvedetector/5625", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6862 - \"Lunary CSRF Exfiltration\"\", \n  \"Content\": \"CVE ID : CVE-2024-6862 \nPublished : Sept. 13, 2024, 5:15 p.m. | 17\u00a0minutes ago \nDescription : A Cross-Site Request Forgery (CSRF) vulnerability exists in lunary-ai/lunary version 1.2.34 due to overly permissive CORS settings. This vulnerability allows an attacker to sign up for and create projects or use the instance as if they were a user with local access. The main attack vector is for instances hosted locally on personal machines, which are not publicly accessible. The CORS settings in the backend permit all origins, exposing unauthenticated endpoints to CSRF attacks. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T19:38:20.000000Z"}, {"uuid": "f223a902-e5aa-4801-8cd8-ca87c2f32ff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6850", "type": "seen", "source": "https://t.me/cvedetector/5538", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6850 - WordPress Carousel Slider Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6850 \nPublished : Sept. 13, 2024, 6:15 a.m. | 29\u00a0minutes ago \nDescription : The Carousel Slider WordPress plugin before 2.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T08:45:29.000000Z"}, {"uuid": "ba982bc3-aafb-4e7e-a736-16e5b6215e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6840", "type": "seen", "source": "https://t.me/cvedetector/5501", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6840 - Ansible Automation Controller Service Account Token Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6840 \nPublished : Sept. 12, 2024, 5:15 p.m. | 32\u00a0minutes ago \nDescription : An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via `automountServiceAccountToken: true`, resulting in privilege escalation to a service account. \nSeverity: 6.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-12T19:48:05.000000Z"}, {"uuid": "91300460-f4db-45b3-a669-854ca1194f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6887", "type": "seen", "source": "https://t.me/cvedetector/5448", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6887 - RafflePress WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6887 \nPublished : Sept. 12, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : The Giveaways and Contests by RafflePress  WordPress plugin before 1.12.16 does not sanitise and escape some of its Giveaways settings, which could allow high privilege users such as editor and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-12T08:55:57.000000Z"}, {"uuid": "99f11a54-2468-4d6f-9f39-80d8bb6a9a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6878", "type": "seen", "source": "https://t.me/cvedetector/5992", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6878 - Eliz Software Panel Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-6878 \nPublished : Sept. 18, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : Files or Directories Accessible to External Parties vulnerability in Eliz Software Panel allows Collect Data from Common Resource Locations.This issue affects Panel: before v2.3.24. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T17:35:24.000000Z"}, {"uuid": "fe3010d6-6778-4224-8017-bcb4498bfa4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6849", "type": "seen", "source": "https://t.me/cvedetector/5017", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6849 - WordPress Preloader Plus Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6849 \nPublished : Sept. 7, 2024, 9:15 a.m. | 25\u00a0minutes ago \nDescription : The Preloader Plus \u2013 WordPress Loading Screen Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-07T11:49:21.000000Z"}, {"uuid": "a7a19f14-90a7-4207-9333-9dd431c1dac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6894", "type": "seen", "source": "https://t.me/cvedetector/4894", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6894 - RD Station for WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-6894 \nPublished : Sept. 5, 2024, 10:15 a.m. | 38\u00a0minutes ago \nDescription : The RD Station plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.3.2 due to insufficient input sanitization and output escaping of post metaboxes added by the plugin. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-05T13:00:06.000000Z"}, {"uuid": "0aa798e9-6788-4e6c-b841-2c0f1a76a6cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6835", "type": "seen", "source": "https://t.me/cvedetector/4889", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6835 - Ivory Search \u2013 WordPress Search Plugin Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-6835 \nPublished : Sept. 5, 2024, 7:15 a.m. | 16\u00a0minutes ago \nDescription : The Ivory Search \u2013 WordPress Search Plugin plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.5.6 via the ajax_load_posts function. This makes it possible for unauthenticated attackers to extract text data from password-protected posts using the boolean-based attack on the AJAX search form \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-05T09:39:36.000000Z"}, {"uuid": "3338e537-5982-4dbd-ac45-1adb10df84d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6846", "type": "seen", "source": "https://t.me/cvedetector/4888", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6846 - \"ChatGPT WordPress REST Route Access Bypass Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-6846 \nPublished : Sept. 5, 2024, 6:15 a.m. | 25\u00a0minutes ago \nDescription : The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing for an unauthenticated user to purge error and chat logs \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-05T08:49:30.000000Z"}, {"uuid": "b8053bb7-be7c-4c88-9587-6d3659ed8550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6889", "type": "seen", "source": "https://t.me/cvedetector/4753", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6889 - Phil Perry Secure Copy Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6889 \nPublished : Sept. 4, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-04T09:22:42.000000Z"}, {"uuid": "8d0e930e-5469-451a-b880-319153a668db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6888", "type": "seen", "source": "https://t.me/cvedetector/4751", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6888 - WordPress Secure Copy Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6888 \nPublished : Sept. 4, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-04T09:22:40.000000Z"}, {"uuid": "a46f7cf1-de0d-4fd4-9cea-8e6b457a9dc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6843", "type": "seen", "source": "https://t.me/cvedetector/3509", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6843 - \"ChatGPT WordPress Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-6843 \nPublished : Aug. 19, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks against admins \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-19T09:20:19.000000Z"}, {"uuid": "f924edd4-626a-49d3-a2fc-7e4c0e771d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6855", "type": "seen", "source": "https://t.me/cvedetector/5073", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6855 - WordPress MultiTasking CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6855 \nPublished : Sept. 8, 2024, 6:15 a.m. | 18\u00a0minutes ago \nDescription : The WP MultiTasking  WordPress plugin through 0.1.12 does not have CSRF check when updating exit popups, which could allow attackers to make logged admins perform such action via a CSRF attack \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-08T08:43:07.000000Z"}, {"uuid": "52755399-f4e1-403d-a786-2145d415b052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6853", "type": "seen", "source": "https://t.me/cvedetector/5072", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6853 - WordPress WP MultiTasking CSRF Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-6853 \nPublished : Sept. 8, 2024, 6:15 a.m. | 18\u00a0minutes ago \nDescription : The WP MultiTasking  WordPress plugin through 0.1.12 does not have CSRF check when updating welcome popups, which could allow attackers to make logged admins perform such action via a CSRF attack \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-08T08:43:06.000000Z"}, {"uuid": "12cc902c-ca88-4c54-b8cb-d56f57d61b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6859", "type": "seen", "source": "https://t.me/cvedetector/5071", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6859 - \"WP MultiTasking Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-6859 \nPublished : Sept. 8, 2024, 6:15 a.m. | 18\u00a0minutes ago \nDescription : The WP MultiTasking  WordPress plugin through 0.1.12 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-08T08:43:05.000000Z"}, {"uuid": "75c03d5d-f7d7-4f5b-bacc-21bb6d5515fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6856", "type": "seen", "source": "https://t.me/cvedetector/5070", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6856 - WordPress WP MultiTasking CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6856 \nPublished : Sept. 8, 2024, 6:15 a.m. | 18\u00a0minutes ago \nDescription : The WP MultiTasking  WordPress plugin through 0.1.12 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-08T08:43:01.000000Z"}, {"uuid": "14e77c36-ace5-4cf9-9be6-2342f3d1be86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6852", "type": "seen", "source": "https://t.me/cvedetector/5066", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6852 - WordPress WP MultiTasking CSRF Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-6852 \nPublished : Sept. 8, 2024, 6:15 a.m. | 18\u00a0minutes ago \nDescription : The WP MultiTasking  WordPress plugin through 0.1.12 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-08T08:42:58.000000Z"}, {"uuid": "4c407e31-47af-42ce-bc48-3aae6a8f33d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6883", "type": "seen", "source": "https://t.me/cvedetector/3733", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6883 - \"WordPress Event Espresso 4 Decaf Unauthorized Plugin Settings Modification Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-6883 \nPublished : Aug. 21, 2024, 6:15 a.m. | 43\u00a0minutes ago \nDescription : The Event Espresso 4 Decaf \u2013 Event Registration Event Ticketing plugin for WordPress is vulnerable to limited unauthorized plugin settings modification due to a missing capability check on the saveTimezoneString and some other functions in all versions up to, and including, 5.0.22.decaf. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify some of the plugin settings. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-21T09:01:47.000000Z"}, {"uuid": "61acc167-be3e-466a-8747-163cc469f636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6870", "type": "seen", "source": "https://t.me/cvedetector/3907", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6870 - WordPress Responsive Lightbox & Gallery Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6870 \nPublished : Aug. 22, 2024, 10:15 a.m. | 25\u00a0minutes ago \nDescription : The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and including, 2.4.7 due to insufficient input sanitization and output escaping affecting the rl_upload_image AJAX endpoint. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the 3gp2 file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T12:41:23.000000Z"}, {"uuid": "9b7d071d-643e-4a6c-b777-53ee108fd54d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6800", "type": "seen", "source": "https://t.me/cvedetector/3681", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6800 - GitHub Enterprise Server SAML Authentication XML Signature Wrapping Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6800 \nPublished : Aug. 20, 2024, 8:15 p.m. | 43\u00a0minutes ago \nDescription : An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when utilizing SAML authentication with specific identity providers. This vulnerability allowed an attacker with direct network access to GitHub Enterprise Server to forge a\u00a0SAML response to provision and/or gain access to a user with site administrator privileges. Exploitation of this vulnerability would allow unauthorized access to the instance without requiring prior authentication.\u00a0This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in versions 3.13.3, 3.12.8, 3.11.14, and 3.10.16. This vulnerability was reported via the GitHub Bug Bounty program. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-20T22:59:26.000000Z"}, {"uuid": "1004fe55-972e-4f19-8e36-573de158596a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6812", "type": "seen", "source": "https://t.me/cvedetector/3794", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6812 - IrfanView WSQ File Parsing Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6812 \nPublished : Aug. 21, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : IrfanView WSQ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the parsing of WSQ files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23273. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-21T19:05:24.000000Z"}, {"uuid": "4a053ad4-c5cb-4cb2-891e-c21b5afcdd35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6811", "type": "seen", "source": "https://t.me/cvedetector/3790", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6811 - IrfanView WSQ File Parsing Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6811 \nPublished : Aug. 21, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : IrfanView WSQ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the parsing of WSQ files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24192. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-21T19:05:17.000000Z"}, {"uuid": "4d8a320e-a1aa-45ea-9e2a-229825f3f975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6813", "type": "seen", "source": "https://t.me/cvedetector/3787", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6813 - NETGEAR ProSAFE Network Management System SQL Injection Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6813 \nPublished : Aug. 21, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this vulnerability.  \n  \nThe specific flaw exists within the getSortString method. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-23207. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-21T19:05:14.000000Z"}, {"uuid": "68a33986-deb2-4564-8659-2d0144569fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6814", "type": "seen", "source": "https://t.me/cvedetector/3784", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6814 - NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-6814 \nPublished : Aug. 21, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this vulnerability.  \n  \nThe specific flaw exists within the getFilterString method. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-23399. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-21T19:05:08.000000Z"}, {"uuid": "7ade348f-ccd9-4f11-89d5-38ed03480b0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6864", "type": "seen", "source": "https://t.me/cvedetector/3602", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6864 - WordPress WP Last Modified Info Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6864 \nPublished : Aug. 20, 2024, 5:15 a.m. | 31\u00a0minutes ago \nDescription : The WP Last Modified Info plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018template\u2019 attribute of the lmt-post-modified-info shortcode in all versions up to, and including, 1.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-20T07:55:53.000000Z"}, {"uuid": "0d1db8a0-4159-4c19-9024-d8dd8e6c2ad5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6847", "type": "seen", "source": "https://t.me/cvedetector/3603", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6847 - WordPress Chatbot SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6847 \nPublished : Aug. 20, 2024, 6:15 a.m. | 29\u00a0minutes ago \nDescription : The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when submitting messages to the chatbot. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-20T08:46:03.000000Z"}, {"uuid": "114a7d43-be5f-424d-bc72-df4e00aac9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6886", "type": "seen", "source": "https://t.me/cvedetector/2525", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6886 - Gitea Stored Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-6886 \nPublished : Aug. 6, 2024, 4:16 a.m. | 42\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T07:28:39.000000Z"}, {"uuid": "7cd93e23-3661-4610-88a8-925e2df89324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6872", "type": "seen", "source": "https://t.me/cvedetector/2390", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6872 - WordPress TemplateSpare Theme Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6872 \nPublished : Aug. 3, 2024, 12:15 p.m. | 44\u00a0minutes ago \nDescription : The Build Your Dream Website Fast with 400+ Starter Templates and Landing Pages, No Coding Needed, One-Click Import for Elementor & Gutenberg Blocks! \u2013 TemplateSpare plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'templatespare_activate_required_theme' and 'templatespare_get_theme_status' functions in all versions up to, and including, 2.4.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate any installed theme and read any theme status. If the attacker attempts to activate a theme that is not installed, a non-existent theme with the slug chosen by the attacker will be considered the active theme, leaving the site with no theme functionality. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-03T15:05:42.000000Z"}, {"uuid": "4c749ab5-1789-4d0d-bfb9-c21d165a965f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6873", "type": "seen", "source": "https://t.me/cvedetector/2247", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6873 - ClickHouse Native Interface Out-of-Bounds Redirected Execution\", \n  \"Content\": \"CVE ID : CVE-2024-6873 \nPublished : Aug. 1, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : It is possible to crash or redirect the execution flow of the ClickHouse server process from an unauthenticated vector by sending a specially crafted request to the ClickHouse server native interface. This redirection is limited to what is available within a 256-byte range of memory at the time of execution, and no known remote code execution (RCE) code has been produced or exploited.  \n  \n\u00a0Fixes have been merged to all currently supported version of ClickHouse.\u00a0If you are maintaining your own forked version of ClickHouse or using an older version and cannot upgrade, the fix for this vulnerability can be found in this commit\u00a0  . \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-01T18:46:14.000000Z"}, {"uuid": "e609eaaa-e5f2-4f4b-8e07-7692b0f0bde2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6804", "type": "seen", "source": "https://t.me/cvedetector/4230", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6804 - Elementor Kit Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6804 \nPublished : Aug. 27, 2024, 7:15 a.m. | 31\u00a0minutes ago \nDescription : The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.6.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-27T09:52:35.000000Z"}, {"uuid": "aba602e8-0775-4437-bb52-7c18ecfacdfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6879", "type": "seen", "source": "https://t.me/cvedetector/4100", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6879 - \"WordPress Quiz and Survey Master Stored XSS Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-6879 \nPublished : Aug. 26, 2024, 6:15 a.m. | 23\u00a0minutes ago \nDescription : The Quiz and Survey Master (QSM)  WordPress plugin before 9.1.1 fails to validate and escape certain Quiz fields before displaying them on a page or post where the Quiz is embedded, which could allows contributor and above roles to perform Stored Cross-Site Scripting (XSS) attacks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-26T08:41:29.000000Z"}, {"uuid": "a2773ca7-df6a-4ce2-9bdf-41d687504b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6823", "type": "seen", "source": "https://t.me/cvedetector/2965", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6823 - WordPress Media Library Assistant Plugin Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6823 \nPublished : Aug. 13, 2024, 6:15 a.m. | 23\u00a0minutes ago \nDescription : The Media Library Assistant plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation involving the mla-inline-edit-upload-scripts AJAX action in all versions up to, and including, 3.18. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T08:44:30.000000Z"}, {"uuid": "7aa031a3-3bf5-4a0a-ad01-e45811fb0fe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6884", "type": "seen", "source": "https://t.me/cvedetector/2756", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6884 - \"Kadence WP Gutenberg Blocks with AI Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-6884 \nPublished : Aug. 8, 2024, 6:15 a.m. | 30\u00a0minutes ago \nDescription : The Gutenberg Blocks with AI by Kadence WP  WordPress plugin before 3.2.39 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-08T08:52:03.000000Z"}, {"uuid": "88995c7f-bb74-4272-a778-60f168955bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6824", "type": "seen", "source": "https://t.me/cvedetector/2754", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6824 - Elementor Premium Addons Unauthenticated Data Deletion and Title Update Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6824 \nPublished : Aug. 8, 2024, 6:15 a.m. | 30\u00a0minutes ago \nDescription : The Premium Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'check_temp_validity' and 'update_template_title' functions in all versions up to, and including, 4.10.38. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete arbitrary content and update post and page titles. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-08T08:52:01.000000Z"}, {"uuid": "4cb44002-49b5-4777-bf57-6d0ff7304380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6869", "type": "seen", "source": "https://t.me/cvedetector/2751", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6869 - WordPress Falang Plugin Authentication Bypass and Data Tampering\", \n  \"Content\": \"CVE ID : CVE-2024-6869 \nPublished : Aug. 8, 2024, 5:15 a.m. | 39\u00a0minutes ago \nDescription : The Falang multilanguage for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.3.52. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update and delete translations and expose the administrator email address. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-08T08:01:55.000000Z"}, {"uuid": "dd1f4c0f-6061-4252-b05a-278015801894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6891", "type": "seen", "source": "https://t.me/cvedetector/2740", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6891 - Google Authentication Python Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6891 \nPublished : Aug. 8, 2024, 12:15 a.m. | 34\u00a0minutes ago \nDescription : Attackers with a valid username and password can exploit a python code injection vulnerability during the natural login flow. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-08T03:01:08.000000Z"}, {"uuid": "b1961901-61ab-4cf8-8a74-95b9c3c914db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6892", "type": "seen", "source": "https://t.me/cvedetector/2739", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6892 - Journyx Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-6892 \nPublished : Aug. 8, 2024, 12:15 a.m. | 34\u00a0minutes ago \nDescription : Attackers can craft a malicious link that once clicked will execute arbitrary JavaScript in the context of the Journyx web application. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-08T03:01:08.000000Z"}, {"uuid": "f852bac2-e21a-4cf2-a200-cc3ede78d253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6893", "type": "seen", "source": "https://t.me/cvedetector/2738", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6893 - Apache SOAP XML External Entity Injection\", \n  \"Content\": \"CVE ID : CVE-2024-6893 \nPublished : Aug. 8, 2024, 12:15 a.m. | 34\u00a0minutes ago \nDescription : The \"soap_cgi.pyc\" API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-08T03:01:07.000000Z"}, {"uuid": "665307de-6908-4a74-8fd6-c5aa7432af24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6890", "type": "seen", "source": "https://t.me/cvedetector/2735", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6890 - Journyx Password Reset Token Guessing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6890 \nPublished : Aug. 7, 2024, 11:15 p.m. | 43\u00a0minutes ago \nDescription : Password reset tokens are generated using an insecure source of randomness. Attackers who know the username of the Journyx installation user can bruteforce the password reset and change the administrator password. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-08T02:11:00.000000Z"}, {"uuid": "e1f97418-13b2-4971-b8ff-aba36ce94220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6836", "type": "seen", "source": "https://t.me/cvedetector/1541", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6836 - \"FunnelKit WordPress Funnel Builder Plugin Unauthenticated Data Modification Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-6836 \nPublished : July 24, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : The Funnel Builder for WordPress by FunnelKit \u2013 Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple functions in all versions up to, and including, 3.4.6. This makes it possible for authenticated attackers, with Contributor-level access and above, to update multiple settings, including templates, designs, checkouts, and other plugin settings. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-24T09:07:31.000000Z"}, {"uuid": "cb06e067-f50f-435b-92fe-cdadb9ac49b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6896", "type": "seen", "source": "https://t.me/cvedetector/1557", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6896 - Apache AMP for WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6896 \nPublished : July 24, 2024, 11:15 a.m. | 35\u00a0minutes ago \nDescription : The AMP for WP \u2013 Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.96.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-24T14:08:28.000000Z"}, {"uuid": "0dbf92d6-f1f8-469d-a65a-6d5f4a7881fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6874", "type": "seen", "source": "https://t.me/cvedetector/1548", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6874 - Libcurl Punycode Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-6874 \nPublished : July 24, 2024, 8:15 a.m. | 27\u00a0minutes ago \nDescription : libcurl's URL API function  \n[curl_url_get()]() offers punycode  \nconversions, to and from IDN. Asking to convert a name that is exactly 256  \nbytes, libcurl ends up reading outside of a stack based buffer when built to  \nuse the *macidn* IDN backend. The conversion function then fills up the  \nprovided buffer exactly - but does not null terminate the string.  \n  \nThis flaw can lead to stack contents accidently getting returned as part of  \nthe converted string. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-24T10:47:44.000000Z"}, {"uuid": "92d7d4c0-c6da-4ba3-8dbf-456e7d09ef8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6828", "type": "seen", "source": "https://t.me/cvedetector/1493", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6828 - WordPress Redux Framework Cross-Site Scripting and Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-6828 \nPublished : July 23, 2024, 2:15 a.m. | 21\u00a0minutes ago \nDescription : The Redux Framework plugin for WordPress is vulnerable to unauthenticated JSON file uploads due to missing authorization and capability checks on the Redux_Color_Scheme_Import function in versions 4.4.12 to 4.4.17. This makes it possible for unauthenticated attackers to upload JSON files, which can be used to conduct stored cross-site scripting attacks and, in some rare cases, when the wp_filesystem fails to initialize - to Remote Code Execution. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-23T04:42:07.000000Z"}, {"uuid": "5a3c4441-3fed-4769-8a44-f2e4e210fb32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6885", "type": "seen", "source": "https://t.me/cvedetector/1492", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6885 - MaxiBlocks WordPress Arbitrary File Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6885 \nPublished : July 23, 2024, 2:15 a.m. | 21\u00a0minutes ago \nDescription : The MaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maxi_remove_custom_image_size and maxi_add_custom_image_size functions in all versions up to, and including, 1.9.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-23T04:42:06.000000Z"}, {"uuid": "61825b02-1819-4ff2-9976-4c33b35a5ca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6805", "type": "seen", "source": "https://t.me/cvedetector/1485", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6805 - NI VeriStand Privilege Escalation Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-6805 \nPublished : July 22, 2024, 9:15 p.m. | 25\u00a0minutes ago \nDescription : The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources.  These missing checks may result in information disclosure or remote code execution.  This affects NI VeriStand 2024 Q2 and prior versions. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-22T23:41:05.000000Z"}, {"uuid": "32a743c2-d4ce-4326-890d-2178c79e4b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6806", "type": "seen", "source": "https://t.me/cvedetector/1483", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6806 - NI VeriStand Gateway Authorization Bypass Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-6806 \nPublished : July 22, 2024, 9:15 p.m. | 25\u00a0minutes ago \nDescription : The NI VeriStand Gateway is missing authorization checks when an actor attempts to access Project resources.  These missing checks may result in remote code execution.  This affects NI VeriStand 2024 Q2 and prior versions. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-22T23:41:04.000000Z"}, {"uuid": "fc7f2355-e1cb-4750-863e-a936c0edcb26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6848", "type": "seen", "source": "https://t.me/cvedetector/1289", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6848 - BoldGrid WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6848 \nPublished : July 20, 2024, 12:15 p.m. | 26\u00a0minutes ago \nDescription : The Post and Page Builder by BoldGrid \u2013 Visual Drag and Drop Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and including, 1.26.6 due to insufficient input sanitization and output escaping affecting the boldgrid_canvas_image AJAX endpoint. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-20T14:47:49.000000Z"}, {"uuid": "97830ea4-cad5-4a67-8481-fcd0f8ef312a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6881", "type": "seen", "source": "https://t.me/cvedetector/1844", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6881 - M-Files Hubshare Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-6881 \nPublished : July 29, 2024, 1:15 p.m. | 36\u00a0minutes ago \nDescription : Stored XSS in M-Files Hubshare versions before 5.0.6.0 allows an authenticated attacker to execute arbitrary JavaScript in user's browser session \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-29T16:17:30.000000Z"}, {"uuid": "6319f356-8771-4f03-a193-c5ba7cc36f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6897", "type": "seen", "source": "https://t.me/cvedetector/1755", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6897 - Aviary WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-6897 \nPublished : July 27, 2024, 12:15 p.m. | 39\u00a0minutes ago \nDescription : The aThemes Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.53 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-27T14:57:10.000000Z"}, {"uuid": "95f47919-dc49-42fa-8c02-cb590334da3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6807", "type": "seen", "source": "https://t.me/cvedetector/1051", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6807 - SourceCodester Student Study Center Desk Management System Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6807 \nPublished : July 17, 2024, 4:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /sscdms/classes/Users.php?f=save of the component HTTP POST Request Handler. The manipulation of the argument firstname/middlename/lastname/username leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-271706 is the identifier assigned to this vulnerability. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T07:21:09.000000Z"}, {"uuid": "d904a728-81f0-46ca-93ca-22c09ece3b99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6808", "type": "seen", "source": "https://t.me/cvedetector/1050", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6808 - Itsoucecode Simple Task List SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6808 \nPublished : July 17, 2024, 4:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in itsourcecode Simple Task List 1.0. It has been classified as critical. This affects the function insertUserRecord of the file signUp.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271707. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T07:21:08.000000Z"}, {"uuid": "8435a622-5ec2-46f8-9f2c-66374cd31ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6895", "type": "seen", "source": "https://t.me/cvedetector/1216", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6895 - Yugabyte Platform Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6895 \nPublished : July 19, 2024, 3:15 p.m. | 31\u00a0minutes ago \nDescription : Insufficient authentication in user account management in Yugabyte Platform allows local network attackers with a compromised user session to change critical security information without re-authentication. An attacker with user session and access to application can modify settings such as password and email without being prompted for the current password, enabling account takeover. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-19T17:52:53.000000Z"}, {"uuid": "6dae40ce-b573-4bf1-a854-c9f361ace5c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6899", "type": "seen", "source": "https://t.me/cvedetector/1189", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6899 - SourceCodester Record Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-6899 \nPublished : July 19, 2024, 5:15 a.m. | 25\u00a0minutes ago \nDescription : A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file view_info.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271924. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-19T07:50:42.000000Z"}, {"uuid": "a268e2ef-79cf-420c-9fe4-1ac4d68aefe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6898", "type": "seen", "source": "https://t.me/cvedetector/1188", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6898 - SourceCodester Record Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6898 \nPublished : July 19, 2024, 4:15 a.m. | 44\u00a0minutes ago \nDescription : A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file index.php. The manipulation of the argument UserName leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271923. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-19T07:00:31.000000Z"}, {"uuid": "7bf1f961-7631-4263-9b2a-4e155123cf5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6830", "type": "seen", "source": "https://t.me/cvedetector/1097", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6830 - SourceCodester Simple Inventory Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6830 \nPublished : July 17, 2024, 4:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in SourceCodester Simple Inventory Management System 1.0. Affected is an unknown function of the file action.php of the component Order Handler. The manipulation of the argument order_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271812. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T19:03:29.000000Z"}, {"uuid": "e72e8ff5-c97a-404a-9446-ba934573dfb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6833", "type": "seen", "source": "https://t.me/cvedetector/1081", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6833 - Zowe CLI Secure Credentials Storage Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6833 \nPublished : July 17, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : A vulnerability in Zowe CLI allows local, privileged actors to store previously entered secure credentials in a plaintext file as part of an auto-init operation. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T18:12:59.000000Z"}, {"uuid": "d0ed71ed-10fd-4c5e-a62b-04b3d241b7e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6834", "type": "seen", "source": "https://t.me/cvedetector/1080", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6834 - Zowe APIML Spring Cloud Gateway Certificate Spoofing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6834 \nPublished : July 17, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : A vulnerability in APIML Spring Cloud Gateway which leverages user privileges by unexpected signing proxied request by Zowe's client certificate. This allows access to a user to the endpoints requiring an internal client certificate without any credentials. It could lead to managing components in there and allow an attacker to handle the whole communication including user credentials. \nSeverity: 9.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T18:12:58.000000Z"}, {"uuid": "82441c56-da69-4f0e-8c0e-37b0248182a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6803", "type": "seen", "source": "https://t.me/cvedetector/1048", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6803 - iSourcecode Document Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6803 \nPublished : July 17, 2024, 3:15 a.m. | 17\u00a0minutes ago \nDescription : A vulnerability has been found in itsourcecode Document Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file insert.php. The manipulation of the argument anothercont leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-271705 was assigned to this vulnerability. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T05:40:48.000000Z"}, {"uuid": "2325cfdc-c013-42b9-9557-aca713af0124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6802", "type": "seen", "source": "https://t.me/cvedetector/1047", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6802 - SourceCodester Computer Laboratory Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6802 \nPublished : July 17, 2024, 2:15 a.m. | 26\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in SourceCodester Computer Laboratory Management System 1.0. Affected is an unknown function of the file /lms/classes/Master.php?f=save_record. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271704. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T04:50:45.000000Z"}, {"uuid": "839e54fa-c829-420b-afdc-68c2ec506057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6801", "type": "seen", "source": "https://t.me/cvedetector/1045", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6801 - SourceCodester Online Student Management System File Upload Unrestricted Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6801 \nPublished : July 17, 2024, 2:15 a.m. | 26\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in SourceCodester Online Student Management System 1.0. This issue affects some unknown processing of the file /add-students.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271703. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T04:50:43.000000Z"}, {"uuid": "5deb89b7-ac24-4fc4-bc20-004ad0f593ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6800", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/669", "content": "#exploit\n1. CVE-2024-40711:\nVeeam Backup & Response - RCE\nhttps://labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-without-auth-cve-2024-40711-2\n\n2. CVE-2024-28000:\nLiteSpeed Cache Privilege Escalation\nhttps://github.com/Alucard0x1/CVE-2024-28000\n\n3. CVE-2024-6800:\nGHES Authentication Bypass\nhttps://cyble.com/blog/saml-exploit-github-cve-2024-6800", "creation_timestamp": "2024-09-10T10:01:29.000000Z"}, {"uuid": "66c953f7-7241-4f06-a166-720334a47470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6800", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/311", "content": "#exploit\n1. CVE-2024-40711:\nVeeam Backup & Response - RCE\nhttps://labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-without-auth-cve-2024-40711-2\n\n2. CVE-2024-28000:\nLiteSpeed Cache Privilege Escalation\nhttps://github.com/Alucard0x1/CVE-2024-28000\n\n3. CVE-2024-6800:\nGHES Authentication Bypass\nhttps://cyble.com/blog/saml-exploit-github-cve-2024-6800", "creation_timestamp": "2024-09-10T14:05:36.000000Z"}, {"uuid": "2e8fad31-2e0a-4f45-89c5-e5f5c4b327e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6800", "type": "seen", "source": "https://t.me/HackingInsights/10797", "content": "\u200aCVE-2024-6800 (CVSS 9.5): Critical GitHub Enterprise Server Flaw Patched, Admin Access at Risk\n\nhttps://securityonline.info/cve-2024-6800-cvss-9-5-critical-github-enterprise-server-flaw-patched-admin-access-at-risk/", "creation_timestamp": "2024-08-21T12:52:52.000000Z"}, {"uuid": "cb4142f7-78f5-4f16-b275-0e78c6eabac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6869", "type": "seen", "source": "Telegram/SaKa4_OSBSKcnmHRs-ilFKz-5dJqB75OK1192_VE1qQetumd", "content": "", "creation_timestamp": "2025-03-02T11:46:30.000000Z"}, {"uuid": "9602ad0d-03ca-45f5-a72c-57d9833545f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6800", "type": "seen", "source": "Telegram/1_vcacoomzYihOGFOx2KRxbErYxJjO2PUlegAUICxwpFLpXv", "content": "", "creation_timestamp": "2024-08-26T14:44:07.000000Z"}, {"uuid": "cba4133a-556e-480c-bcab-55a9dfadd279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6800", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/18477", "content": "The Hacker News\nGitHub Patches Critical Security Flaw in Enterprise Server Granting Admin Privileges\n\nGitHub has released fixes to address a set of three security flaws impacting its Enterprise Server product, including one critical bug that could be abused to gain site administrator privileges.\nThe most severe of the shortcomings has been assigned the CVE identifier CVE-2024-6800, and carries a CVSS score of 9.5.\n\"On GitHub Enterprise Server instances that use SAML single sign-on (SSO)", "creation_timestamp": "2024-08-22T09:49:44.000000Z"}, {"uuid": "ca237004-c17b-4d2e-a5fb-d1c64c851d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6800", "type": "seen", "source": "Telegram/V6C3WOxDbov-Mvc3FF7LxHWCN2GrvxrxFbMqJzKk7o1fcw", "content": "", "creation_timestamp": "2024-08-22T09:59:50.000000Z"}, {"uuid": "d04a5f1d-265f-4ce3-ba53-09e308e560a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6800", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/3692", "content": "The Hacker News\nGitHub Patches Critical Security Flaw in Enterprise Server Granting Admin Privileges\n\nGitHub has released fixes to address a set of three security flaws impacting its Enterprise Server product, including one critical bug that could be abused to gain site administrator privileges.\nThe most severe of the shortcomings has been assigned the CVE identifier CVE-2024-6800, and carries a CVSS score of 9.5.\n\"On GitHub Enterprise Server instances that use SAML single sign-on (SSO)", "creation_timestamp": "2024-08-22T09:49:44.000000Z"}, {"uuid": "fcf757c7-b049-4794-a6b3-3e45c090cdef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6800", "type": "seen", "source": "https://t.me/KomunitiSiber/2442", "content": "GitHub Patches Critical Security Flaw in Enterprise Server Granting Admin Privileges\nhttps://thehackernews.com/2024/08/github-patches-critical-security-flaw.html\n\nGitHub has released fixes to address a set of three security flaws impacting its Enterprise Server product, including one critical bug that could be abused to gain site administrator privileges.\nThe most severe of the shortcomings has been assigned the CVE identifier CVE-2024-6800, and carries a CVSS score of 9.5.\n\"On GitHub Enterprise Server instances that use SAML single sign-on (SSO)", "creation_timestamp": "2024-08-22T10:28:22.000000Z"}, {"uuid": "ccd51f2c-6c6c-4b54-ae0e-ccd83e5ab266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6893", "type": "published-proof-of-concept", "source": "Telegram/kwST7UxfdOpPSNIW8OMSbCBiue2Rp7M2mJ6BB150JUHtpuwW", "content": "", "creation_timestamp": "2024-08-18T00:46:55.000000Z"}, {"uuid": "ad968a5c-579b-405e-99b1-4295718c4411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6893", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1557", "content": "", "creation_timestamp": "2024-08-30T06:51:52.000000Z"}, {"uuid": "509da527-3aec-4013-a967-ce6d393833b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6800", "type": "seen", "source": "https://t.me/true_secator/6127", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0439 GitHub Enterprise Server \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435.\n\nCVE-2024-6800 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 9,5 \u043f\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0443 CVSS 4.0.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u044f XML-\u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u043e\u0442\u0432\u0435\u0442\u044b Security Assertion Markup Language (SAML).\n\n\u041d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 GitHub Enterprise Server, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e SAML \u0441 \u0435\u0434\u0438\u043d\u044b\u043c \u0432\u0445\u043e\u0434\u043e\u043c (SSO) \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c\u0438 IdP, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u0430\u0442\u044c \u043e\u0442\u0432\u0435\u0442 SAML \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0430\u0439\u0442\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b FOFA, \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0431\u043e\u043b\u0435\u0435 36 500 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 GHES, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 (29 200) \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0421\u0428\u0410, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 \u043d\u0435 \u044f\u0441\u043d\u043e.\n\nGitHub \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 GHES 3.13.3, 3.12.8, 3.11.14 \u0438 3.10.16. \n\n\u041d\u043e\u0432\u044b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 GHES \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438: \n\n- CVE-2024-7711 (CVSS: 5,3): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a, \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043b\u0438\u0446 \u0438 \u043c\u0435\u0442\u043a\u0438 \u043b\u044e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438.\n\n- CVE-2024-6337 (CVSS: 5,9): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438\u0437 \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f GitHub.\n\n\u0412\u0441\u0435 \u0442\u0440\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b GitHub Bug Bounty \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 HackerOne.\n\nGitHub \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u043e \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432\u0441\u0435 \u0440\u0430\u0432\u043d\u043e \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c\u0441\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e.", "creation_timestamp": "2024-08-23T12:50:05.000000Z"}, {"uuid": "3b538570-564d-4e6e-af1a-8452f2399855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6800", "type": "seen", "source": "https://t.me/thehackernews/5455", "content": "#GitHub has released critical fixes for 3 flaws in Enterprise Server, including CVE-2024-6800 (CVSS 9.5). \n \nThis flaw could allow attackers to gain admin privileges, posing serious risks to organizations using SAML SSO. \n \nDetails: https://thehackernews.com/2024/08/github-patches-critical-security-flaw.html", "creation_timestamp": "2024-08-22T06:54:04.000000Z"}, {"uuid": "ad98a299-0e9b-43a4-9ed6-241af7e2e185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6800", "type": "seen", "source": "https://t.me/xakep_ru/16290", "content": "\u0412 GitHub Enterprise Server \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 GitHub \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0441\u0440\u0430\u0437\u0443 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GitHub Enterprise Server \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u0442\u0447\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435. \u0422\u0430\u043a, \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0439 GitHub Enterprise Server, \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\nhttps://xakep.ru/2024/08/22/cve-2024-6800/", "creation_timestamp": "2024-08-22T16:06:26.000000Z"}, {"uuid": "f5e39b52-4bc5-4ff0-a692-6bdab019ec3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6800", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11107", "content": "#exploit\n1. CVE-2024-40711:\nVeeam Backup & Response - RCE\nhttps://labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-without-auth-cve-2024-40711-2\n]-> https://github.com/watchtowrlabs/CVE-2024-40711\n\n2. CVE-2024-28000:\nLiteSpeed Cache Privilege Escalation\nhttps://github.com/Alucard0x1/CVE-2024-28000\n\n3. CVE-2024-6800:\nGHES Authentication Bypass\nhttps://cyble.com/blog/saml-exploit-github-cve-2024-6800", "creation_timestamp": "2024-09-16T18:20:15.000000Z"}, {"uuid": "0848c967-6f45-4527-83e5-facf55f77b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-6874", "type": "seen", "source": "https://gist.github.com/Caixa-git/b651dc90f3055319340ba3e6976fb35e", "content": "", "creation_timestamp": "2026-05-11T12:23:09.000000Z"}, {"uuid": "faca3901-03da-47fb-bc4b-21dfc22ef28b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-6800", "type": "seen", "source": "https://t.me/ZerodayAlert/305", "content": "", "creation_timestamp": "2026-07-06T11:00:05.026148Z"}, {"uuid": "b8035947-f399-4cce-b306-903dfe7ef2dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-6858", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnipigspj72x", "content": "", "creation_timestamp": "2026-06-04T22:49:54.088865Z"}, {"uuid": "8985e939-6c64-46eb-a51d-cd879e387b85", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6893", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/cf23d040-3563-4b96-aada-3ba8353d14a1", "content": "", "creation_timestamp": "2026-06-19T12:42:22.224819Z"}, {"uuid": "958d5a11-4266-438a-a658-62f33c131ff8", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6893", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/24ec216d-0d67-44ce-82ee-22dd7a4857db", "content": "", "creation_timestamp": "2026-07-01T05:54:40.939137Z"}, {"uuid": "eb2239f1-6371-450f-993d-8ee6957d6a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-6800", "type": "seen", "source": "https://t.me/ZerodayAlert/305", "content": "", "creation_timestamp": "2026-07-11T21:00:04.140086Z"}, {"uuid": "33c5edcb-fc17-4491-8288-0251e0556849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-6800", "type": "seen", "source": "https://t.me/ZerodayAlert/305", "content": "", "creation_timestamp": "2026-07-12T00:00:21.029504Z"}]}