#ExploitObserverAlert

CVE-2023-6320

DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-6320. A command injection vulnerability exists in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint on webOS versions 5 and 6. A series of specially crafted requests can lead to command execution as the dbus user. An attacker can make authenticated requests to trigger this vulnerability. Full versions and TV models affected: * webOS 5.5.0 - 04.50.51 running on OLED55CXPUA  * webOS 6.3.3-442 (kisscurl-kinglake) - 03.36.50 running on OLED48C1PUB

FIRST-EPSS: 0.000430000

#ExploitObserverAlert

CVE-2024-26236

DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2024-26236. Windows Update Stack Elevation of Privilege Vulnerability

FIRST-EPSS: 0.000430000
NVD-IS: 5.9
NVD-ES: 1.0

#ExploitObserverAlert

CVE-2023-48784

DESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-48784. A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.1 and below, version 7.2.7 and below, version 7.0.14 and below, version 6.4.15 and below command line interface may allow a local privileged attacker with super-admin profile and CLI access to execute arbitrary code or commands via specially crafted requests.

FIRST-EPSS: 0.000430000

#ExploitObserverAlert

CVE-2024-1587

DESCRIPTION: Exploit Observer has 4 entries in 1 file formats related to CVE-2024-1587. The Newsmatic theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.0 via the 'newsmatic_filter_posts_load_tab_content'. This makes it possible for unauthenticated attackers to view draft posts and post content.

FIRST-EPSS: 0.000430000

#ExploitObserverAlert

CVE-2024-2187

DESCRIPTION: Exploit Observer has 4 entries in 1 file formats related to CVE-2024-2187. The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Testimonials widget in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

FIRST-EPSS: 0.000430000

#ExploitObserverAlert

CVE-2024-1643

DESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-1643. By knowing an organization's ID, an attacker can join the organization without permission and gain the ability to read and modify all data within that organization. This vulnerability allows unauthorized access and modification of sensitive information, posing a significant security risk. The flaw is due to insufficient verification of user permissions when joining an organization.

FIRST-EPSS: 0.000430000
ARPS-EXPLOITABILITY: 0.5780347

#ExploitObserverAlert

CVE-2024-3094

DESCRIPTION: Exploit Observer has 1523 entries in 40 file formats related to CVE-2024-3094. Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked against this library, intercepting and modifying the data interaction with this library.

FIRST-EPSS: 0.001200000
NVD-IS: 6.0
NVD-ES: 3.9
ARPS-EXPLOITABILITY: 0.7568716

#ExploitObserverAlert

CVE-2024-3569

DESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-3569. A Denial of Service (DoS) vulnerability exists in the mintplex-labs/anything-llm repository when the application is running in 'just me' mode with a password. An attacker can exploit this vulnerability by making a request to the endpoint using the [validatedRequest] middleware with a specially crafted 'Authorization:' header. This vulnerability leads to uncontrolled resource consumption, causing a DoS condition.

FIRST-EPSS: 0.000430000
ARPS-EXPLOITABILITY: 0.5780347

#ExploitObserverAlert

CVE-2021-44144

DESCRIPTION: Exploit Observer has 5 entries in 2 file formats related to CVE-2021-44144. Croatia Control Asterix 2.8.1 has a heap-based buffer over-read, with additional details to be disclosed at a later date.

FIRST-EPSS: 0.001660000
NVD-IS: 5.2
NVD-ES: 3.9
ARPS-EXPLOITABILITY: 0.5949341

#ExploitObserverAlert

CVE-2023-51704

DESCRIPTION: Exploit Observer has 8 entries in 2 file formats related to CVE-2023-51704. An issue was discovered in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. In includes/logging/RightsLogFormatter.php, group-*-member messages can result in XSS on Special:log/rights.

FIRST-EPSS: 0.000460000
NVD-IS: 2.7
NVD-ES: 2.8
ARPS-EXPLOITABILITY: 0.5804944

#ExploitObserverAlert

CVE-2024-3448

DESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-3448. Users with low privileges can perform certain AJAX actions. In this vulnerability instance, improper access to ajax?action=plugin:focus:checkIframeAvailability leads to a Server-Side Request Forgery by analyzing the error messages returned from the back-end. Allowing an attacker to perform a port scan in the back-end. At the time of publication of the CVE no patch is available.

FIRST-EPSS: 0.000430000
ARPS-EXPLOITABILITY: 0.5780347

#ExploitObserverAlert

CVE-2024-24758

DESCRIPTION: Exploit Observer has 8 entries in 1 file formats related to CVE-2024-24758. Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici already cleared Authorization headers on cross-origin redirects, but did not clear `Proxy-Authentication` headers. This issue has been patched in versions 5.28.3 and 6.6.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

FIRST-EPSS: 0.000430000
ARPS-EXPLOITABILITY: 0.5780347

#ExploitObserverAlert

CVE-2024-2029

DESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-2029. A command injection vulnerability exists in the `TranscriptEndpoint` of mudler/localai, specifically within the `audioToWav` function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing them to ffmpeg via a shell command, allowing an attacker to execute arbitrary commands on the host system. Successful exploitation could lead to unauthorized access, data breaches, or other detrimental impacts, depending on the privileges of the process executing the code.

FIRST-EPSS: 0.000430000
ARPS-EXPLOITABILITY: 0.5780347

#ExploitObserverAlert

CVE-2023-49555

DESCRIPTION: Exploit Observer has 7 entries in 3 file formats related to CVE-2023-49555. An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_smacro function in the modules/preprocs/nasm/nasm-pp.c component.

FIRST-EPSS: 0.000680000
NVD-IS: 3.6
NVD-ES: 1.8
ARPS-EXPLOITABILITY: 0.5963488

#ExploitObserverAlert

CVE-2024-1740

DESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-1740. In lunary-ai/lunary version 1.0.1, a vulnerability exists where a user removed from an organization can still read, create, modify, and delete logs by re-using an old authorization token. The lunary web application communicates with the server using an 'Authorization' token in the browser, which does not properly invalidate upon the user's removal from the organization. This allows the removed user to perform unauthorized actions on logs and access project and external user details without valid permissions.

FIRST-EPSS: 0.000430000
ARPS-EXPLOITABILITY: 0.5780347

#ExploitObserverAlert

CVE-2024-2730

DESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-2730. Mautic uses predictable page indices for unpublished landing pages, their content can be accessed by unauthenticated users under public preview URLs which could expose sensitive data. At the time of publication of the CVE no patch is available

FIRST-EPSS: 0.000430000
ARPS-EXPLOITABILITY: 0.5780347

#ExploitObserverAlert

CVE-2017-7266

DESCRIPTION: Exploit Observer has 6 entries in 2 file formats related to CVE-2017-7266. Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header.

FIRST-EPSS: 0.001550000
NVD-IS: 2.7
NVD-ES: 2.8
ARPS-EXPLOITABILITY: 0.5941964

#ExploitObserverAlert

CVE-2023-49462

DESCRIPTION: Exploit Observer has 8 entries in 3 file formats related to CVE-2023-49462. libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc.

FIRST-EPSS: 0.000940000
NVD-IS: 5.9
NVD-ES: 2.8
ARPS-EXPLOITABILITY: 0.5905308

#ExploitObserverAlert

CVE-2024-22019

DESCRIPTION: Exploit Observer has 13 entries in 2 file formats related to CVE-2024-22019. A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encoding, leading to resource exhaustion and denial of service (DoS). The server reads an unbounded number of bytes from a single connection, exploiting the lack of limitations on chunk extension bytes. The issue can cause CPU and network bandwidth exhaustion, bypassing standard safeguards like timeouts and body size limits.

FIRST-EPSS: 0.000430000
ARPS-EXPLOITABILITY: 0.5817243

#ExploitObserverAlert

CVE-2023-46871

DESCRIPTION: Exploit Observer has 10 entries in 3 file formats related to CVE-2023-46871. GPAC version 2.3-DEV-rev602-ged8424300-master in MP4Box contains a memory leak in NewSFDouble scenegraph/vrml_tools.c:300. This vulnerability may lead to a denial of service.

FIRST-EPSS: 0.000460000
NVD-IS: 1.4
NVD-ES: 3.9
ARPS-EXPLOITABILITY: 0.5959611

#ExploitObserverAlert

CVE-2023-21665

DESCRIPTION: Exploit Observer has 10 entries in 2 file formats related to CVE-2023-21665. Memory corruption in Graphics while importing a file.

FIRST-EPSS: 0.000430000
NVD-IS: 5.9
NVD-ES: 1.8
ARPS-EXPLOITABILITY: 0.6476879