Aggregator

A vulnerability was found in parisneo lollms-webui and classified as problematic. Affected by this issue is some unknown functionality of the component Chat Message Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-5933. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in imartinez privategpt up to 0.5.0. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request forgery. This vulnerability is uniquely identified as CVE-2024-5935. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability classified as critical has been found in stitionai devika. This affects an unknown part. The manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2024-5820. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Conversios Plugin up to 7.1.0 on WordPress. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-6288. The attack may be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Infinite Plugin up to 1.1.2 on WordPress. Affected is an unknown function. The manipulation of the argument project_url leads to cross site scripting. This vulnerability is traded as CVE-2024-5796. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability has been found in Silesia Plugin up to 1.0.6 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Button Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-5788. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in VMware Workspace One UEM 23.10.x/23.6.x/23.4.x/22.12.x and classified as critical. Affected by this issue is some unknown functionality of the component Update Address Handler. The manipulation leads to information disclosure. This vulnerability is handled as CVE-2024-22260. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Theron Lite Plugin up to 2.0 on WordPress. This vulnerability affects unknown code of the component Button Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-5925. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in Microsoft Edge. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to out-of-bounds read. This vulnerability is known as CVE-2024-34122. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Scylla Lite Handler up to 1.8.3 on WordPress. This issue affects some unknown processing of the component Button Shortcode Handler. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-5922. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as problematic was found in HCL DRYiCE AEX 10. Affected by this vulnerability is an unknown functionality of the component Web Application Handler. The manipulation leads to improper restriction of rendered ui layers. This vulnerability is known as CVE-2024-30109. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Animated AL List Plugin up to 1.0.6 on WordPress. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-5728. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability has been found in Simple AL Slider Plugin up to 1.2.10 on WordPress and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-5729. The attack can be initiated remotely. There is no exploit available.

Fuzzable Framework for Automating Fuzzable Target Discovery with Static Analysis Vulnerability researchers conducting security assessments on software will often harness the capabilities of coverage-guided fuzzing through powerful tools like AFL++ and libFuzzer. This is important as...

The post fuzzable: Automating Fuzzable Target Discovery with Static Analysis appeared first on Penetration Testing Tools.

NTLM Relay Gat NTLM Relay Gat is a powerful tool designed to automate the exploitation of NTLM relays using ntlmrelayx.py from the Impacket tool suite. By leveraging the capabilities of ntlmrelayx.py, NTLM Relay Gat streamlines...

The post NTLM Relay Gat: automate the exploitation of NTLM relays appeared first on Penetration Testing Tools.

Hfinger – fingerprinting HTTP requests Tool for fingerprinting HTTP requests of malware. Based on Tshark and written in Python3. Working prototype stage 🙂 Its main objective is to provide a representation of malware requests...

The post Hfinger: fingerprinting HTTP requests appeared first on Penetration Testing Tools.

小米代号昆仑的全新增程 SUV 谍照曝光；电影哪吒之魔童闹海官方宣布延长上映至 4 月 30 日，此前曾在 2 月 19 日宣布延长上映至 3 月 30 日。Perplexity 刚刚提出收购（并改造）TikTok 的要约。

A vulnerability was found in Apple macOS. It has been classified as problematic. Affected is an unknown function of the component Backup File Handler. The manipulation leads to improper access controls. This vulnerability is traded as CVE-2024-54525. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apple watchOS. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Backup File Handler. The manipulation leads to improper access controls. This vulnerability is known as CVE-2024-54525. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.