Skip to main content
CVE-2024-42049 Jul 28, 02:15 CRITICAL POC Act Now

TightVNC (Server for Windows) before 2.8.84 allows attackers to connect to the control pipe via a network connection. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Microsoft
NVD Exploit-DB
CVSS 3.1
9.1
EPSS
2.1%
CVE-2024-7172 Jul 28, 23:15 HIGH POC This Week

A vulnerability classified as critical was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow A3600r Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
8.7
EPSS
1.1%
CVE-2024-7157 Jul 28, 11:15 HIGH POC This Week

A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050_B20200504. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow A3100R Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
8.7
EPSS
7.4%
CVE-2024-7169 Jul 28, 20:15 MEDIUM POC This Month

A vulnerability classified as problematic has been found in SourceCodester School Fees Payment System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP CSRF School Fees Payment System Oretnom23
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.3%
CVE-2024-7164 Jul 28, 17:15 MEDIUM POC This Month

A vulnerability has been found in SourceCodester School Fees Payment System 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi School Fees Payment System Oretnom23
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-7161 Jul 28, 16:15 MEDIUM POC This Month

A vulnerability classified as problematic was found in SeaCMS 13.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP CSRF Seacms
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.3%
CVE-2024-7156 Jul 28, 11:15 MEDIUM POC THREAT This Month

A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as problematic. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure A3700r Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
13.3%
CVE-2024-7171 Jul 28, 23:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection A3600r Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
3.1%
CVE-2024-7168 Jul 28, 19:15 MEDIUM POC This Month

A vulnerability was found in SourceCodester School Fees Payment System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi School Fees Payment System Oretnom23
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-7167 Jul 28, 19:15 MEDIUM POC This Month

A vulnerability was found in SourceCodester School Fees Payment System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi School Fees Payment System Oretnom23
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-7166 Jul 28, 18:15 MEDIUM POC This Month

A vulnerability was found in SourceCodester School Fees Payment System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi School Fees Payment System Oretnom23
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-7165 Jul 28, 18:15 MEDIUM POC This Month

A vulnerability was found in SourceCodester School Fees Payment System 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi School Fees Payment System Oretnom23
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-7163 Jul 28, 17:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in SeaCMS 12.9. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Seacms
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-7162 Jul 28, 16:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, has been found in SeaCMS 12.9/13.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Seacms
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-7160 Jul 28, 15:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection A3700r Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
3.0%
CVE-2024-7158 Jul 28, 14:15 MEDIUM POC This Month

A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050_B20200504. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection A3100R Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
3.1%
CVE-2024-7154 Jul 28, 10:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass A3700r Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-7170 Jul 28, 22:15 MEDIUM POC This Month

A vulnerability was found in TOTOLINK A3000RU 5.9c.5185. Rated medium severity (CVSS 5.1), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass A3000Ru Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.7%
CVE-2024-7159 Jul 28, 15:15 MEDIUM POC This Month

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Rated medium severity (CVSS 5.1), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass A3600r Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.6%
CVE-2024-42053 Jul 28, 03:15 HIGH This Week

The MSI installer for Splashtop Streamer for Windows before 3.6.0.0 uses a temporary folder with weak permissions during installation. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Streamer Splashtop
NVD GitHub
CVSS 3.1
7.8
EPSS
0.2%
CVE-2024-42052 Jul 28, 03:15 HIGH This Week

The MSI installer for Splashtop Streamer for Windows before 3.5.8.0 uses a temporary folder with weak permissions during installation. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Streamer Splashtop
NVD GitHub
CVSS 3.1
7.8
EPSS
0.2%
CVE-2024-42051 Jul 28, 03:15 HIGH This Week

The MSI installer for Splashtop Streamer for Windows before 3.6.2.0 uses a temporary folder with weak permissions during installation. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Streamer Splashtop
NVD GitHub
CVSS 3.1
7.8
EPSS
0.2%
CVE-2024-42050 Jul 28, 03:15 HIGH This Week

The MSI installer for Splashtop Streamer for Windows before 3.7.0.0 uses a temporary folder with weak permissions during installation. Rated high severity (CVSS 7.0). No vendor patch available.

Privilege Escalation Microsoft Streamer Splashtop
NVD GitHub
CVSS 3.1
7.0
EPSS
0.1%
CVE-2024-7155 Jul 28, 10:15 LOW POC Monitor

A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024 and classified as problematic. Rated low severity (CVSS 2.0). Public exploit code available and no vendor patch available.

Authentication Bypass A3300R Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
2.0
EPSS
0.3%
CVE-2024-42055 Jul 28, 04:15 MEDIUM PATCH This Month

Cervantes through 0.5-alpha allows stored XSS. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Cervantes
NVD GitHub
CVSS 3.1
5.4
EPSS
0.4%
CVE-2024-42054 Jul 28, 04:15 MEDIUM PATCH This Month

Cervantes through 0.5-alpha accepts insecure file uploads. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Unrestricted File Upload vulnerability could allow attackers to upload malicious files that can be executed on the server.

File Upload Cervantes
NVD GitHub
CVSS 3.1
5.4
EPSS
0.4%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy