Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-48176 State: PUBLISHED Published: 2024-11-05T00:00:00 Last Updated: 2024-11-06T16:04:46.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control. There is no limit on the number of login attempts, and the verification code will not be refreshed after a failed login, which allows attackers to blast the username and password and log into the system backend. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/Gryffinbit/c0b37c6caae4844d4f59368e454d3e46
CVE ID: CVE-2024-48177 State: PUBLISHED Published: 2024-10-28T00:00:00 Last Updated: 2024-10-30T17:08:27.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: MRCMS 3.1.2 contains a SQL injection vulnerability via the RID parameter in /admin/article/delete.do. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dabaizhizhu/123/issues/9
CVE ID: CVE-2024-48178 State: PUBLISHED Published: 2024-10-28T00:00:00 Last Updated: 2024-10-30T17:38:26.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: newbee-mall v1.0.0 is vulnerable to Server-Side Request Forgery (SSRF) via the goodsCoverImg parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dabaizhizhu/123/issues/10
CVE ID: CVE-2024-48180 State: PUBLISHED Published: 2024-10-16T00:00:00 Last Updated: 2024-10-17T16:49:55.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/J-0k3r/CVE-2024-48180
CVE ID: CVE-2024-48191 State: PUBLISHED Published: 2024-10-28T00:00:00 Last Updated: 2024-10-28T15:54:46.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=delAdmin&id=17 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/xiaoyin0226/cms/tree/main/5/readme.md
CVE ID: CVE-2024-48192 State: PUBLISHED Published: 2024-10-17T00:00:00 Last Updated: 2024-10-17T17:51:01.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda G3 v15.01.0.5(2848_755)_EN was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://colorful-meadow-5b9.notion.site/G3_HardCode_vuln-6b5ae19473b745d7abe5e01b4529caf8?pvs=4
CVE ID: CVE-2024-48195 State: PUBLISHED Published: 2024-10-28T00:00:00 Last Updated: 2024-10-30T17:45:11.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cyb3res3c/CVE-2024-48195/blob/main/CVE-2024-48195.md
CVE ID: CVE-2024-48196 State: PUBLISHED Published: 2024-10-28T00:00:00 Last Updated: 2024-10-30T17:44:30.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cyb3res3c/CVE-2024-49186/blob/main/CVE-2024-48196.md
CVE ID: CVE-2024-48197 State: PUBLISHED Published: 2025-01-02T00:00:00 Last Updated: 2025-01-02T19:25:03.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Audiocodes MP-202b v.4.4.3 allows a remote attacker to escalate privileges via the login page of the web interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://audiocodes.com - http://mp-202b.com - https://github.com/GCatt-AS/CVE-2024-48197
CVE ID: CVE-2024-48200 State: PUBLISHED Published: 2024-10-31T00:00:00 Last Updated: 2024-11-01T15:39:59.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in MobaXterm v24.2 allows a local attacker to escalate privileges and execute arbitrary code via the remove function of the MobaXterm MSI is spawning one Administrative cmd (conhost.exe) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mobaxterm.mobatek.net/download-home-edition.html - https://gist.github.com/ahmedsherif/ad56cd3a9ef86cdc05175fb591804c64
CVE ID: CVE-2024-48202 State: PUBLISHED Published: 2024-10-30T00:00:00 Last Updated: 2024-10-31T14:32:35.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: icecms <=3.4.7 has a File Upload vulnerability in FileUtils.java,uploadFile. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Lunax0/LogLunax/blob/main/icecms/CVE-2024-48202.md
CVE ID: CVE-2024-48204 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-25T19:30:16.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Hanzhou Haobo network management system 1.0 allows a remote attacker to execute arbitrary code via a crafted script. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/NasYangh/161618e4552ca40ad1ac25b4d673bfcf
CVE ID: CVE-2024-48206 State: PUBLISHED Published: 2024-10-29T00:00:00 Last Updated: 2024-10-30T14:56:46.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Deserialization of Untrusted Data vulnerability in chainer v7.8.1.post1 leads to execution of arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://rumbling-slice-eb0.notion.site/chainer-s-chainermn-has-MPI-Deserialization-vulnerability-in-chainer-chainer-c6a004feb53a447e8fb440968d73d6fd?pvs=4 - https://gist.github.com/hexian2001/51c6257351098e5b086a12ad247cc6ca
CVE ID: CVE-2024-48208 State: PUBLISHED Published: 2024-10-24T00:00:00 Last Updated: 2024-10-28T18:27:39.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the ls.c file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jedisct1/pure-ftpd/pull/176
CVE ID: CVE-2024-48213 State: PUBLISHED Published: 2024-10-23T00:00:00 Last Updated: 2024-10-31T17:57:08.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: RockOA v2.6.5 is vulnerable to Directory Traversal in webmain/system/beifen/beifenAction.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/N0zoM1z0/CVEs/blob/main/CVE-2024-48213.md
CVE ID: CVE-2024-48214 State: PUBLISHED Published: 2024-10-30T00:00:00 Last Updated: 2024-10-31T15:22:03.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: KERUI HD 3MP 1080P Tuya Camera 1.0.4 has a command injection vulnerability in the module that connects to the local network via a QR code. This vulnerability allows an attacker to create a custom, unauthenticated QR code and abuse one of the parameters, either SSID or PASSWORD, in the JSON data contained within the QR code. By that, the attacker can execute arbitrary code on the camera. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://medium.com/%40shenhavmor/exploiting-a-chinese-camera-for-fun-cve-202
tes: - CISA ADP Vulnrichment: References: - https://medium.com/%40shenhavmor/exploiting-a-chinese-camera-for-fun-cve-2024-48214-2d56848870c2
CVE ID: CVE-2024-48217 State: PUBLISHED Published: 2024-11-01T00:00:00 Last Updated: 2024-11-05T15:03:29.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Insecure Direct Object Reference (IDOR) in the dashboard of SiSMART v7.4.0 allows attackers to execute a horizontal-privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ajrielrm/CVE-2024-48217
CVE ID: CVE-2024-48218 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-29T17:44:49.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/funadmin/funadmin/issues/21
CVE ID: CVE-2024-48222 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-29T17:46:03.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/funadmin/funadmin/issues/22
CVE ID: CVE-2024-48223 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-29T17:47:11.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/funadmin/funadmin/issues/23
CVE ID: CVE-2024-48224 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-29T17:53:19.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Funadmin v5.0.2 has an arbitrary file read vulnerability in /curd/index/editfile. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/funadmin/funadmin/issues/24
CVE ID: CVE-2024-48225 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-28T20:21:52.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/funadmin/funadmin/issues/25
CVE ID: CVE-2024-48226 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-28T20:16:50.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/funadmin/funadmin/issues/26
CVE ID: CVE-2024-48227 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-28T20:15:21.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service (DOS). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/funadmin/funadmin/issues/27
CVE ID: CVE-2024-48228 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-28T20:03:24.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was found in funadmin 5.0.2. The selectfiles method in \backend\controller\sys\Attachh.php directly stores the passed parameters and values into the param parameter without filtering, resulting in Cross Site Scripting (XSS). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/funadmin/funadmin/issues/31
CVE ID: CVE-2024-48229 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-28T20:08:59.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/funadmin/funadmin/issues/28
CVE ID: CVE-2024-48230 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-28T20:07:24.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/funadmin/funadmin/issues/30
CVE ID: CVE-2024-48231 State: PUBLISHED Published: 2024-10-21T00:00:00 Last Updated: 2024-10-21T18:42:42.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Funadmin 5.0.2 is vulnerable to SQL Injection via the selectFields parameter in the index method of \backend\controller\auth\Auth.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/funadmin/funadmin/issues/29
CVE ID: CVE-2024-48232 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-30T19:10:24.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was found in mipjz 5.0.5. In the mipPost method of \app\setting\controller\ApiAdminTool.php, the value of the postAddress parameter is not processed and is directly passed into curl_exec execution and output, resulting in a Server-side request forgery (SSRF) vulnerability that can read server files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sansanyun/mipjz/issues/17
CVE ID: CVE-2024-48233 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-30T19:11:27.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: mipjz 5.0.5 is vulnerable to Cross Site Scripting (XSS) in \app\setting\controller\ApiAdminSetting.php via the ICP parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sansanyun/mipjz/issues/16
CVE ID: CVE-2024-48234 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-29T19:00:05.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mipjz 5.0.5. In the push method of app\tag\controller\ApiAdminTag.php the value of the postAddress parameter is not processed and is directly passed into curl_exec execution and output, resulting in Server-side request forgery (SSRF) vulnerability that can read server files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sansanyun/mipjz/issues/18
CVE ID: CVE-2024-48235 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-29T18:58:33.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the save method of the TemplateController.java file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/oufu/ofcms/issues/IASIES
CVE ID: CVE-2024-48236 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-29T18:57:26.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the FileOutputStream function in the write String method of the ofcms-admin\src\main\java\com\ofsoft\cms\core\uitle\FileUtils.java file Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/oufu/ofcms/issues/IASIBT
CVE ID: CVE-2024-48237 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-31T17:50:51.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: WTCMS 1.0 is vulnerable to Incorrect Access Control in \Common\Controller\HomebaseController.class.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/taosir/wtcms/issues/15
CVE ID: CVE-2024-48238 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-29T18:53:50.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: WTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl.class.php via the parentid parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/taosir/wtcms/issues/14
CVE ID: CVE-2024-48239 State: PUBLISHED Published: 2024-10-25T00:00:00 Last Updated: 2024-10-29T18:52:24.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the app parameters aren't processed, resulting in Cross Site Scripting (XSS). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/taosir/wtcms/issues/16
CVE ID: CVE-2024-48241 State: PUBLISHED Published: 2024-10-30T00:00:00 Last Updated: 2024-10-31T15:10:27.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in radare2 v5.8.0 through v5.9.4 allows a local attacker to cause a denial of service via the __bf_div function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/radareorg/radare2/issues/23317 - https://github.com/radareorg/radare2/pull/23318 - https://github.com/St-Andrews-Bug-Busters/Vuln_info/blob/main/radare2/CVE-2024-48241.md
CVE ID: CVE-2024-48245 State: PUBLISHED Published: 2025-01-07T00:00:00 Last Updated: 2025-01-07T20:01:18.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vehicle Management System 1.0 is vulnerable to SQL Injection. A guest user can exploit vulnerable POST parameters in various administrative actions, such as booking a vehicle or confirming a booking. The affected parameters include "Booking ID", "Action Name", and "Payment Confirmation ID", which are present in /newvehicle.php and /newdriver.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://vehicle.com - https://github.com/ShadowByte1/CVE-2024-48245
CVE ID: CVE-2024-48246 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-06T14:23:01.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vehicle Management System 1.0 contains a Stored Cross-Site Scripting (XSS) vulnerability in the "Name" parameter of /vehicle-management/booking.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ShadowByte1/CVE-2024-48246
CVE ID: CVE-2024-48248 State: PUBLISHED Published: 2025-03-04T00:00:00.000Z Last Updated: 2025-10-21T22:55:28.559Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: NAKIVO Products: Backup & Replication Director Problem Types: CWE-36 Description: NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://labs.watchtowr.com/the-best-security-is-when-we-all-agree-to-keep-everything-secret-except-the-secrets-na
ces: - https://labs.watchtowr.com/the-best-security-is-when-we-all-agree-to-keep-everything-secret-except-the-secrets-nakivo-backup-replication-cve-2024-48248/ - https://helpcenter.nakivo.com/Release-Notes/Content/Release-Notes.htm
CVE ID: CVE-2024-48249 State: PUBLISHED Published: 2024-10-14T00:00:00 Last Updated: 2024-10-15T18:11:08.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wavelog 1.8.5 allows Gridmap_model.php get_band_confirmed SQL injection via band, sat, propagation, or mode. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wavelog.org - https://github.com/wavelog/wavelog/commit/0bf2675d93602b591850790c8fcfced886eca423 - https://chiggerlor.substack.com/p/unauthenticated-sql-injection-in
CVE ID: CVE-2024-48251 State: PUBLISHED Published: 2024-10-14T00:00:00 Last Updated: 2024-10-17T17:29:19.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wavelog 1.8.5 allows Activated_gridmap_model.php get_band_confirmed SQL injection via band, sat, propagation, or mode. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wavelog.org - https://github.com/wavelog/wavelog/commit/0bf2675d93602b591850790c8fcfced886eca423 - https://chiggerlor.substack.com/p/unauthenticated-sql-injection-in
CVE ID: CVE-2024-48253 State: PUBLISHED Published: 2024-10-14T00:00:00 Last Updated: 2024-10-15T18:17:36.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloudlog 2.6.15 allows Oqrs.php delete_oqrs_line id SQL injection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/magicbug/Cloudlog - https://www.magicbug.co.uk/cloudlog/ - https://chiggerlor.substack.com/p/unauthenticated-sql-injection-in-9a3
CVE ID: CVE-2024-48255 State: PUBLISHED Published: 2024-10-14T00:00:00 Last Updated: 2024-10-16T12:57:29.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloudlog 2.6.15 allows Oqrs.php get_station_info station_id SQL injection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/magicbug/Cloudlog - https://www.magicbug.co.uk/cloudlog/ - https://chiggerlor.substack.com/p/unauthenticated-sql-injection-in-9a3
CVE ID: CVE-2024-48257 State: PUBLISHED Published: 2024-10-14T00:00:00 Last Updated: 2024-10-15T19:54:10.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wavelog 1.8.5 allows Oqrs_model.php get_worked_modes station_id SQL injectioin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wavelog.org - https://github.com/wavelog/wavelog/commit/0bf2675d93602b591850790c8fcfced886eca423 - https://chiggerlor.substack.com/p/unauthenticated-sql-injection-in
CVE ID: CVE-2024-48259 State: PUBLISHED Published: 2024-10-14T00:00:00 Last Updated: 2024-10-15T18:19:57.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloudlog 2.6.15 allows Oqrs.php request_form SQL injection via station_id or callsign. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/magicbug/Cloudlog - https://www.magicbug.co.uk/cloudlog/ - https://chiggerlor.substack.com/p/unauthenticated-sql-injection-in-9a3
CVE ID: CVE-2024-48261 State: REJECTED Published: N/A Last Updated: 2024-10-14T14:34:03.203569 Description: No description available.
CVE ID: CVE-2024-48270 State: PUBLISHED Published: 2024-11-01T00:00:00 Last Updated: 2024-11-04T19:04:26.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component /logins of oasys v1.1 allows attackers to access sensitive information via a burst attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/misstt123/oasys - https://github.com/majic-banana/vulnerability/blob/main/POC/Verification%20Code%20Reuse--misstt123oasys.md
CVE ID: CVE-2024-48271 State: PUBLISHED Published: 2024-10-30T00:00:00 Last Updated: 2024-10-31T15:40:24.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSL6740C v6.TR069.20211230 was discovered to use insecure default credentials for Administrator access, possibly allowing attackers to bypass authentication and escalate privileges on the device via a bruteforce attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://gist.github.com/stevenyu113228/e264c145d6e6e6b59cf53fddc27409ad#1--predictable-administrator-credentials-in-d-link-dsl6740c-modem
CVE ID: CVE-2024-48272 State: PUBLISHED Published: 2024-10-30T00:00:00 Last Updated: 2024-10-31T15:36:16.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSL6740C v6.TR069.20211230 was discovered to use an insecure default Wifi password, possibly allowing attackers to connect to the device via a bruteforce attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://gist.github.com/stevenyu113228/e264c145d6e6e6b59cf53fddc27409ad#2--predictable-wifi-password-in-d-link-dsl6740c-modem
CVE ID: CVE-2024-48278 State: PUBLISHED Published: 2024-10-15T00:00:00 Last Updated: 2024-10-15T14:48:32.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to Cross Site Request Forgery (CSRF) via /edit-profile.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/m14r41/Writeups/blob/main/CVE/phpGurukul/User%20Registration%20%26%20Login%20and%20User%20Management%20System%20With%20admin%20panel/CSRF%20-%20Profile.md