#ExploitObserverAlert
CVE-2023-49912
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-49912. A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.This vulnerability refers specifically to the overflow that occurs via the `profile` parameter at offset `0x4224b0` of the `httpd` binary shipped with v5.0.4 Build 20220216 of the EAP115.
FIRST-EPSS: 0.000430000
NVD-IS: 5.9
NVD-ES: 1.2
CVE-2023-49912
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-49912. A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.This vulnerability refers specifically to the overflow that occurs via the `profile` parameter at offset `0x4224b0` of the `httpd` binary shipped with v5.0.4 Build 20220216 of the EAP115.
FIRST-EPSS: 0.000430000
NVD-IS: 5.9
NVD-ES: 1.2
#ExploitObserverAlert
CVE-2024-0899
DESCRIPTION: Exploit Observer has 4 entries in 1 file formats related to CVE-2024-0899. The s2Member – Best Membership Plugin for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 230815 via the API. This makes it possible for unauthenticated attackers to see the contents of those posts and pages.
FIRST-EPSS: 0.000430000
CVE-2024-0899
DESCRIPTION: Exploit Observer has 4 entries in 1 file formats related to CVE-2024-0899. The s2Member – Best Membership Plugin for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 230815 via the API. This makes it possible for unauthenticated attackers to see the contents of those posts and pages.
FIRST-EPSS: 0.000430000
#ExploitObserverAlert
CVE-2023-49074
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-49074. A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of network requests can lead to reset to factory settings. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.
FIRST-EPSS: 0.000430000
NVD-IS: 5.2
NVD-ES: 2.2
CVE-2023-49074
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-49074. A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of network requests can lead to reset to factory settings. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.
FIRST-EPSS: 0.000430000
NVD-IS: 5.2
NVD-ES: 2.2
#ExploitObserverAlert
CVE-2024-26218
DESCRIPTION: Exploit Observer has 3 entries in 2 file formats related to CVE-2024-26218. Windows Kernel Elevation of Privilege Vulnerability
FIRST-EPSS: 0.000430000
NVD-IS: 5.9
NVD-ES: 1.8
CVE-2024-26218
DESCRIPTION: Exploit Observer has 3 entries in 2 file formats related to CVE-2024-26218. Windows Kernel Elevation of Privilege Vulnerability
FIRST-EPSS: 0.000430000
NVD-IS: 5.9
NVD-ES: 1.8
#ExploitObserverAlert
CVE-2024-29063
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2024-29063. Azure AI Search Information Disclosure Vulnerability
FIRST-EPSS: 0.000430000
NVD-IS: 5.5
NVD-ES: 1.8
CVE-2024-29063
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2024-29063. Azure AI Search Information Disclosure Vulnerability
FIRST-EPSS: 0.000430000
NVD-IS: 5.5
NVD-ES: 1.8
#ExploitObserverAlert
CVE-2024-26213
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2024-26213. Microsoft Brokering File System Elevation of Privilege Vulnerability
FIRST-EPSS: 0.000430000
NVD-IS: 5.9
NVD-ES: 1.0
CVE-2024-26213
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2024-26213. Microsoft Brokering File System Elevation of Privilege Vulnerability
FIRST-EPSS: 0.000430000
NVD-IS: 5.9
NVD-ES: 1.0
#ExploitObserverAlert
CVE-2024-3093
DESCRIPTION: Exploit Observer has 4 entries in 1 file formats related to CVE-2024-3093. The Font Farsi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including 1.6.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
FIRST-EPSS: 0.000430000
CVE-2024-3093
DESCRIPTION: Exploit Observer has 4 entries in 1 file formats related to CVE-2024-3093. The Font Farsi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including 1.6.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
FIRST-EPSS: 0.000430000
#ExploitObserverAlert
CVE-2024-2223
DESCRIPTION: Exploit Observer has 4 entries in 2 file formats related to CVE-2024-2223. An Incorrect Regular Expression vulnerability in Bitdefender GravityZone Update Server allows an attacker to cause a Server Side Request Forgery and reconfigure the relay. This issue affects the following products that include the vulnerable component: Bitdefender Endpoint Security for Linux version 7.0.5.200089 Bitdefender Endpoint Security for Windows version 7.9.9.380 GravityZone Control Center (On Premises) version 6.36.1
FIRST-EPSS: 0.000430000
CVE-2024-2223
DESCRIPTION: Exploit Observer has 4 entries in 2 file formats related to CVE-2024-2223. An Incorrect Regular Expression vulnerability in Bitdefender GravityZone Update Server allows an attacker to cause a Server Side Request Forgery and reconfigure the relay. This issue affects the following products that include the vulnerable component: Bitdefender Endpoint Security for Linux version 7.0.5.200089 Bitdefender Endpoint Security for Windows version 7.9.9.380 GravityZone Control Center (On Premises) version 6.36.1
FIRST-EPSS: 0.000430000
#ExploitObserverAlert
CVE-2024-1960
DESCRIPTION: Exploit Observer has 4 entries in 1 file formats related to CVE-2024-1960. The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Special Offer Day Widget Banner Link in all versions up to, and including, 2.8.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
FIRST-EPSS: 0.000450000
CVE-2024-1960
DESCRIPTION: Exploit Observer has 4 entries in 1 file formats related to CVE-2024-1960. The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Special Offer Day Widget Banner Link in all versions up to, and including, 2.8.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
FIRST-EPSS: 0.000450000
#ExploitObserverAlert
CVE-2023-47541
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-47541. An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiSandbox version 4.4.0 through 4.4.2 and 4.2.0 through 4.2.6 and 4.0.0 through 4.0.5 and 3.2.0 through 3.2.4 and 3.1.0 through 3.1.5 and 3.0.0 through 3.0.7 and 2.5.0 through 2.5.2 and 2.4.0 through 2.4.1 and 2.3.0 through 2.3.3 and 2.2.0 through 2.2.2 and 2.1.0 through 2.1.3 and 2.0.0 through 2.0.3 allows attacker to execute unauthorized code or commands via CLI.
FIRST-EPSS: 0.000430000
CVE-2023-47541
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-47541. An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiSandbox version 4.4.0 through 4.4.2 and 4.2.0 through 4.2.6 and 4.0.0 through 4.0.5 and 3.2.0 through 3.2.4 and 3.1.0 through 3.1.5 and 3.0.0 through 3.0.7 and 2.5.0 through 2.5.2 and 2.4.0 through 2.4.1 and 2.3.0 through 2.3.3 and 2.2.0 through 2.2.2 and 2.1.0 through 2.1.3 and 2.0.0 through 2.0.3 allows attacker to execute unauthorized code or commands via CLI.
FIRST-EPSS: 0.000430000
#ExploitObserverAlert
CVE-2024-21756
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2024-21756. A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSandbox version 4.4.0 through 4.4.3 and 4.2.0 through 4.2.6 and 4.0.0 through 4.0.4 allows attacker to execute unauthorized code or commands via crafted requests..
FIRST-EPSS: 0.000430000
CVE-2024-21756
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2024-21756. A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSandbox version 4.4.0 through 4.4.3 and 4.2.0 through 4.2.6 and 4.0.0 through 4.0.4 allows attacker to execute unauthorized code or commands via crafted requests..
FIRST-EPSS: 0.000430000
#ExploitObserverAlert
CVE-2024-23671
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2024-23671. A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiSandbox version 4.4.0 through 4.4.3 and 4.2.0 through 4.2.6 and 4.0.0 through 4.0.4 allows attacker to execute unauthorized code or commands via crafted HTTP requests.
FIRST-EPSS: 0.000430000
CVE-2024-23671
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2024-23671. A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiSandbox version 4.4.0 through 4.4.3 and 4.2.0 through 4.2.6 and 4.0.0 through 4.0.4 allows attacker to execute unauthorized code or commands via crafted HTTP requests.
FIRST-EPSS: 0.000430000
#ExploitObserverAlert
CVE-2023-49908
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-49908. A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.This vulnerability refers specifically to the overflow that occurs via the `profile` parameter at offset `0x0045abc8` of the `httpd_portal` binary shipped with v5.1.0 Build 20220926 of the EAP225.
FIRST-EPSS: 0.000430000
NVD-IS: 5.9
NVD-ES: 1.2
CVE-2023-49908
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-49908. A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.This vulnerability refers specifically to the overflow that occurs via the `profile` parameter at offset `0x0045abc8` of the `httpd_portal` binary shipped with v5.1.0 Build 20220926 of the EAP225.
FIRST-EPSS: 0.000430000
NVD-IS: 5.9
NVD-ES: 1.2
#ExploitObserverAlert
CVE-2024-28917
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2024-28917. Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability
FIRST-EPSS: 0.000430000
NVD-IS: 4.0
NVD-ES: 1.7
CVE-2024-28917
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2024-28917. Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability
FIRST-EPSS: 0.000430000
NVD-IS: 4.0
NVD-ES: 1.7
#ExploitObserverAlert
CVE-2024-1904
DESCRIPTION: Exploit Observer has 4 entries in 1 file formats related to CVE-2024-1904. The MasterStudy LMS plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the search_posts function in all versions up to, and including, 3.2.13. This makes it possible for authenticated attackers, with subscriber-level access and above, to expose draft post titles and excerpts.
FIRST-EPSS: 0.000430000
CVE-2024-1904
DESCRIPTION: Exploit Observer has 4 entries in 1 file formats related to CVE-2024-1904. The MasterStudy LMS plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the search_posts function in all versions up to, and including, 3.2.13. This makes it possible for authenticated attackers, with subscriber-level access and above, to expose draft post titles and excerpts.
FIRST-EPSS: 0.000430000
#ExploitObserverAlert
CVE-2023-6317
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-6317. A prompt bypass exists in the secondscreen.gateway service running on webOS version 4 through 7. An attacker can create a privileged account without asking the user for the security PIN. Full versions and TV models affected: webOS 4.9.7 - 5.30.40 running on LG43UM7000PLA webOS 5.5.0 - 04.50.51 running on OLED55CXPUA webOS 6.3.3-442 (kisscurl-kinglake) - 03.36.50 running on OLED48C1PUB webOS 7.3.1-43 (mullet-mebin) - 03.33.85 running on OLED55A23LA
FIRST-EPSS: 0.000430000
CVE-2023-6317
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-6317. A prompt bypass exists in the secondscreen.gateway service running on webOS version 4 through 7. An attacker can create a privileged account without asking the user for the security PIN. Full versions and TV models affected: webOS 4.9.7 - 5.30.40 running on LG43UM7000PLA webOS 5.5.0 - 04.50.51 running on OLED55CXPUA webOS 6.3.3-442 (kisscurl-kinglake) - 03.36.50 running on OLED48C1PUB webOS 7.3.1-43 (mullet-mebin) - 03.33.85 running on OLED55A23LA
FIRST-EPSS: 0.000430000
#ExploitObserverAlert
CVE-2024-21447
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2024-21447. Windows Authentication Elevation of Privilege Vulnerability
FIRST-EPSS: 0.000430000
NVD-IS: 5.9
NVD-ES: 1.8
CVE-2024-21447
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2024-21447. Windows Authentication Elevation of Privilege Vulnerability
FIRST-EPSS: 0.000430000
NVD-IS: 5.9
NVD-ES: 1.8
#ExploitObserverAlert
CVE-2023-47542
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-47542. A improper neutralization of special elements used in a template engine [CWE-1336] in FortiManager versions 7.4.1 and below, versions 7.2.4 and below, and 7.0.10 and below allows attacker to execute unauthorized code or commands via specially crafted templates.
FIRST-EPSS: 0.000430000
CVE-2023-47542
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-47542. A improper neutralization of special elements used in a template engine [CWE-1336] in FortiManager versions 7.4.1 and below, versions 7.2.4 and below, and 7.0.10 and below allows attacker to execute unauthorized code or commands via specially crafted templates.
FIRST-EPSS: 0.000430000
#ExploitObserverAlert
CVE-2023-6320
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-6320. A command injection vulnerability exists in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint on webOS versions 5 and 6. A series of specially crafted requests can lead to command execution as the dbus user. An attacker can make authenticated requests to trigger this vulnerability. Full versions and TV models affected: * webOS 5.5.0 - 04.50.51 running on OLED55CXPUA * webOS 6.3.3-442 (kisscurl-kinglake) - 03.36.50 running on OLED48C1PUB
FIRST-EPSS: 0.000430000
CVE-2023-6320
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-6320. A command injection vulnerability exists in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint on webOS versions 5 and 6. A series of specially crafted requests can lead to command execution as the dbus user. An attacker can make authenticated requests to trigger this vulnerability. Full versions and TV models affected: * webOS 5.5.0 - 04.50.51 running on OLED55CXPUA * webOS 6.3.3-442 (kisscurl-kinglake) - 03.36.50 running on OLED48C1PUB
FIRST-EPSS: 0.000430000
#ExploitObserverAlert
CVE-2024-26236
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2024-26236. Windows Update Stack Elevation of Privilege Vulnerability
FIRST-EPSS: 0.000430000
NVD-IS: 5.9
NVD-ES: 1.0
CVE-2024-26236
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2024-26236. Windows Update Stack Elevation of Privilege Vulnerability
FIRST-EPSS: 0.000430000
NVD-IS: 5.9
NVD-ES: 1.0
#ExploitObserverAlert
CVE-2023-48784
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-48784. A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.1 and below, version 7.2.7 and below, version 7.0.14 and below, version 6.4.15 and below command line interface may allow a local privileged attacker with super-admin profile and CLI access to execute arbitrary code or commands via specially crafted requests.
FIRST-EPSS: 0.000430000
CVE-2023-48784
DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-48784. A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.1 and below, version 7.2.7 and below, version 7.0.14 and below, version 6.4.15 and below command line interface may allow a local privileged attacker with super-admin profile and CLI access to execute arbitrary code or commands via specially crafted requests.
FIRST-EPSS: 0.000430000