Skip to main content
CVE-2024-1021 Jan 29, 22:15 CRITICAL POC THREAT Act Now

A vulnerability, which was classified as critical, has been found in Rebuild up to 3.5.5. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SSRF Rebuild Ruifang Tech
NVD VulDB
CVSS 3.1
9.8
EPSS
34.7%
CVE-2024-24141 Jan 29, 20:15 CRITICAL POC Act Now

Sourcecodester School Task Manager App 1.0 allows SQL Injection via the 'task' parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi School Task Manager Remyandrade
NVD GitHub
CVSS 3.1
9.8
EPSS
1.1%
CVE-2024-1009 Jan 29, 17:15 CRITICAL POC Act Now

A vulnerability was found in SourceCodester Employee Management System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Employee Management System Employee Management System Project
NVD VulDB
CVSS 3.1
9.8
EPSS
0.8%
CVE-2024-23822 Jan 29, 16:15 CRITICAL POC PATCH Act Now

Thruk is a multibackend monitoring webinterface. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Path Traversal File Upload Thruk
NVD GitHub
CVSS 3.1
9.8
EPSS
1.4%
CVE-2024-1001 Jan 29, 14:15 CRITICAL POC Act Now

A vulnerability classified as critical has been found in Totolink N200RE 9.3.5u.6139_B20201216. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow N200re Firmware TOTOLINK
NVD VulDB
CVSS 3.1
9.8
EPSS
1.4%
CVE-2024-0996 Jan 29, 03:15 CRITICAL POC Act Now

A vulnerability classified as critical has been found in Tenda i9 1.0.0.9(4122). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Tenda I9 Firmware
NVD VulDB
CVSS 3.1
9.8
EPSS
1.6%
CVE-2024-0995 Jan 29, 02:15 CRITICAL POC Act Now

A vulnerability was found in Tenda W6 1.0.0.9(4122). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Tenda W6 Firmware
NVD VulDB
CVSS 3.1
9.8
EPSS
1.7%
CVE-2024-0994 Jan 29, 02:15 CRITICAL POC Act Now

A vulnerability was found in Tenda W6 1.0.0.9(4122). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Tenda W6 Firmware
NVD VulDB
CVSS 3.1
9.8
EPSS
1.7%
CVE-2024-0993 Jan 29, 02:15 CRITICAL POC Act Now

A vulnerability was found in Tenda i6 1.0.0.9(3857). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Tenda I6 Firmware
NVD VulDB
CVSS 3.1
9.8
EPSS
1.7%
CVE-2024-0992 Jan 29, 01:15 CRITICAL POC Act Now

A vulnerability was found in Tenda i6 1.0.0.9(3857) and classified as critical. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Tenda I6 Firmware
NVD VulDB
CVSS 3.1
9.8
EPSS
1.7%
CVE-2024-0991 Jan 29, 01:15 CRITICAL POC Act Now

A vulnerability has been found in Tenda i6 1.0.0.9(3857) and classified as critical. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Tenda I6 Firmware
NVD VulDB
CVSS 3.1
9.8
EPSS
1.7%
CVE-2024-0990 Jan 29, 01:15 CRITICAL POC Act Now

A vulnerability, which was classified as critical, was found in Tenda i6 1.0.0.9(3857). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Tenda I6 Firmware
NVD VulDB
CVSS 3.1
9.8
EPSS
1.7%
CVE-2024-0986 Jan 29, 00:15 CRITICAL POC THREAT Act Now

A vulnerability was found in Issabel PBX 4.0.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Command Injection Pbx Issabel
NVD VulDB
CVSS 3.1
9.8
EPSS
58.2%
CVE-2024-1015 Jan 29, 14:15 CRITICAL Act Now

Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Code Injection E Ddc3 3 Firmware
NVD
CVSS 3.1
9.8
EPSS
1.4%
CVE-2024-23827 Jan 29, 16:15 CRITICAL PATCH Act Now

Nginx-UI is a web interface to manage Nginx configurations. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Path Traversal Nginx Nginx Ui Nginxui
NVD GitHub
CVSS 3.1
9.8
EPSS
0.7%
CVE-2024-23790 Jan 29, 10:15 CRITICAL Act Now

Improper Input Validation vulnerability in the upload functionality for user avatars allows functionality misuse due to missing check of filetypes.0.X through 7.0.48, from 8.0.X through 8.0.37, from. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Otrs
NVD
CVSS 3.1
9.8
EPSS
0.3%
CVE-2024-0989 Jan 29, 01:15 CRITICAL Act Now

A vulnerability, which was classified as problematic, has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Path Traversal Kuerp Kuerp Project
NVD VulDB
CVSS 3.1
9.8
EPSS
1.2%
CVE-2024-0988 Jan 29, 00:15 CRITICAL Act Now

A vulnerability classified as critical was found in Sichuan Yougou Technology KuERP up to 1.0.4. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Authentication Bypass Kuerp Kuerp Project
NVD VulDB
CVSS 3.1
9.8
EPSS
1.0%
CVE-2024-0987 Jan 29, 00:15 CRITICAL Act Now

A vulnerability classified as critical has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Kuerp Kuerp Project
NVD VulDB
CVSS 3.1
9.8
EPSS
0.9%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy