CXSECURITY.COM Free Security List
CVE-2024-10093. A vulnerability, which was classified as critical, was found in VSO ConvertXtoDvd 7.0.0.83. Affected is an unknown function in the library avcodec.dll of the file ConvertXtoDvd.exe. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
Vulnerability CVE-2024-10130
1 day ago · CVE-2024-10130. Published: 2024-10-18 Modified: 2024-10-19. Description: A vulnerability classified as critical was found in Tenda AC8 16.03.34.06. This vulnerability affects the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to stack-based buffer overflow.
Vulnerability CVE-2024-9683
2 days ago · CVE-2024-9683. Published: 2024-10-17. Description: A vulnerability was found in Quay, which allows successful authentication even when a truncated password version is provided. This flaw affects the authentication mechanism, reducing the overall security of password enforcement. While the risk is relatively low due to the typical length of the ...
Vulnerability CVE-2024-9219
1 day ago · CVE-2024-9219. Published: 2024-10-19. Description: The WordPress Social Share Buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.19. This makes it possible for unauthenticated attackers to inject arbitrary ...
Vulnerability CVE-2019-25218
1 day ago · CVE-2019-25218. Published: 2024-10-19. Description: The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
Microsoft SQL Server Masked Data Exposure - CXSecurity.com
Sep 18, 2024 · Title: SQL Server Masked Data Exposure Through Brute Force Attack Product: Database Manufacturer: Microsoft Affected Version(s): SQL Server 2014, 2016,2017,2019,2022 Tested Version(s): SQL Server 2014, 2016,2017,2019,2022 Risk Level: Low Security Feature: Dynamic Data Masking Author of Advisory: Emad Al-Mousa ***** Vulnerability Details And Back Ground: Microsoft SQL Server database system has ...
Exploit Database - Site 1 - CXSECURITY
Kafka UI 0.7.1 Command Injection. CVE CWE Remote h00die-gr3y. Site 1 of WLB Exploit Database is a huge collection of information on data communications safety.
Dorks List - CXSecurity.com
Dorks List WLB2 G00GLEH4CK. See examples for inurl, intext, intitle, powered by, version, designed etc. Designed to support the cert
Vendors CVEMAP - CXSECURITY.COM
Vendors List of Common Vulnerabilities and Exposures. A basis for evaluation among tools and databases. The way to interoperability and better security coverage.
Vulnerability CVE-2021-46825 - CXSECURITY
Description: Symantec Advanced Secure Gateway (ASG) and ProxySG are susceptible to an HTTP desync vulnerability. When a remote unauthenticated attacker and other web clients communicate through the proxy with the same web server, the attacker can send crafted HTTP requests and cause the proxy to forward web server responses to unintended clients.