CVE-2024-12847: Proof-of-Concept Exploit Code Released
CVE-2024-12847: Proof-of-Concept Exploit Code Released OverviewCVE-2024-12847 is a critical security vulnerability affecting certain models of NETGEAR routers, notably the DGN1000 and DGN2200 v1. This vulnerability has been assigned a CVSS score of 9.8, r … Read more Published Date: Jan 11, 2025 (1 hour, 10 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2024-12847 CVE-2024-51741 CVE-2024-46981 […]
CVE-2024-12587 – Contact Form Master WordPress XSS
CVE ID : CVE-2024-12587 Published : Jan. 11, 2025, 6:15 a.m. | 14 minutes ago Description : The Contact Form Master WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. […]
Reversing, Discovering, And Exploiting A TP-Link Router Vulnerability — CVE-2024–54887
Reversing, Discovering, And Exploiting A TP-Link Router Vulnerability — CVE-2024–54887 OverviewRecently, I picked up an interest in reverse engineering and exploit development. After a while, picking at Hack The Box challenges can get tired, and I started looking for a more interesting … Read more Published Date: Jan 11, 2025 (1 hour, 48 minutes ago) Vulnerabilities has been mentioned […]
CVE-2025-23109 – Firefox for iOS DNS Spoofing
The following table lists the changes that have been made to the CVE-2025-23109 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Jan. 11, 2025 Action […]
CVE-2025-23108 – Firefox for iOS Tab Spoofing Vulnerability
The following table lists the changes that have been made to the CVE-2025-23108 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Jan. 11, 2025 Action […]
CVE-2024-12304 – Kadence WP Gutenberg Blocks with AI Page Builder Stored Cross-Site Scripting (XSS) Vulnerability
CVE ID : CVE-2024-12304 Published : Jan. 11, 2025, 4:15 a.m. | 29 minutes ago Description : The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via button block link in all versions up to, and including, 3.4.2 due to insufficient input sanitization and […]
CVE-2025-0107 – Palo Alto Networks Expedition Command Injection Vulnerability
The following table lists the changes that have been made to the CVE-2025-0107 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Jan. 11, 2025 Action […]
CVE-2025-0106 – Palo Alto Networks Expedition File System Exposure
The following table lists the changes that have been made to the CVE-2025-0106 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Jan. 11, 2025 Action […]
CVE-2025-0105 – Palo Alto Networks Expedition Unauthenticated File Deletion Vulnerability
The following table lists the changes that have been made to the CVE-2025-0105 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Jan. 11, 2025 Action […]
CVE-2025-0104 – Palo Alto Networks Expedition Reflected Cross-Site Scripting (XSS)
The following table lists the changes that have been made to the CVE-2025-0104 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Jan. 11, 2025 Action […]