Updated by Github Bot

EXP-Tools · Feb 13, 2024 · dc1ffab · dc1ffab
1 parent ae384ae
commit dc1ffab
Show file tree

Hide file tree

Showing 3 changed files with 19 additions and 18 deletions.
diff --git a/cache/RedQueen.dat b/cache/RedQueen.dat
@@ -101,3 +101,4 @@ cd99ed83b21938ef352043a1b6531149
 89781c0ad377c932a43e8eb1f1c68eb9
 743463f58bf0d2dba16c99d0f276677e
 e62fec695432b0675f4aa9d97a64e6f8
+bb99a378d31e75c322c0fa04a315a356
diff --git a/data/cves.db b/data/cves.db
diff --git a/docs/index.html b/docs/index.html
@@ -1,4 +1,4 @@
-<!-- RELEASE TIME : 2024-02-12 23:21:35 -->
+<!-- RELEASE TIME : 2024-02-13 03:24:18 -->
 <html lang="zh-cn">
 
  <head>
@@ -326,135 +326,135 @@ <h2><a href="https://exp-blog.com" target="_blank">眈眈探求</a> | <a href="h
       <tr>
        <td>8fa5a716a7437bfdae163da7d9ecc0e1</td>
        <td>CVE-2024-1433</td>
-       <td>2024-02-11 23:15:07 <img src="imgs/new.gif" /></td>
+       <td>2024-02-11 23:15:07</td>
        <td>A vulnerability, which was classified as problematic, was found in KDE Plasma Workspace up to 5.93.0. This affects the function EventPluginsManager::enabledPlugins of the file components/calendar/eventpluginsmanager.cpp of the component Theme File Handler. The manipulation of the argument pluginId leads to path traversal. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The patch is named 6cdf42916369ebf4ad5bd876c4dfa0170d7b2f01. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-253407. NOTE: This requires write access to user's home or the installation of third party global themes.</td>
        <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-1433">详情</a></td>
       </tr>
 
       <tr>
        <td>2ee0f376aaf6f42762853e62d254d63a</td>
        <td>CVE-2024-25728</td>
-       <td>2024-02-11 22:15:08 <img src="imgs/new.gif" /></td>
+       <td>2024-02-11 22:15:08</td>
        <td>ExpressVPN before 12.73.0 on Windows, when split tunneling is used, sends DNS requests according to the Windows configuration (e.g., sends them to DNS servers operated by the user's ISP instead of to the ExpressVPN DNS servers), which may allow remote attackers to obtain sensitive information about websites visited by VPN users.</td>
        <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-25728">详情</a></td>
       </tr>
 
       <tr>
        <td>6ef8c696e1d824edf671edcd48a1011b</td>
        <td>CVE-2024-25419</td>
-       <td>2024-02-11 21:15:46 <img src="imgs/new.gif" /></td>
+       <td>2024-02-11 21:15:46</td>
        <td>flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_menu.php.</td>
        <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-25419">详情</a></td>
       </tr>
 
       <tr>
        <td>883e1f93e289237f7a3e603c99a7ca30</td>
        <td>CVE-2024-25418</td>
-       <td>2024-02-11 21:15:46 <img src="imgs/new.gif" /></td>
+       <td>2024-02-11 21:15:46</td>
        <td>flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_menu.php.</td>
        <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-25418">详情</a></td>
       </tr>
 
       <tr>
        <td>c3703210bec0c4bc80d80dcce840cec2</td>
        <td>CVE-2024-25417</td>
-       <td>2024-02-11 21:15:46 <img src="imgs/new.gif" /></td>
+       <td>2024-02-11 21:15:46</td>
        <td>flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/add_translation.php.</td>
        <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-25417">详情</a></td>
       </tr>
 
       <tr>
        <td>746d865c32c958ee584e146185b6eb54</td>
        <td>CVE-2024-1151</td>
-       <td>2024-02-11 15:15:07 <img src="imgs/new.gif" /></td>
+       <td>2024-02-11 15:15:07</td>
        <td>A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth, pushing too many frames and causing a stack overflow. As a result, this can lead to a crash or other related issues.</td>
        <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-1151">详情</a></td>
       </tr>
 
       <tr>
        <td>2f9b668dfeaacb4b634bc3b40d48e004</td>
        <td>CVE-2024-21875</td>
-       <td>2024-02-11 09:15:07 <img src="imgs/new.gif" /></td>
+       <td>2024-02-11 09:15:07</td>
        <td>Allocation of Resources Without Limits or Throttling vulnerability in Badge leading to a denial of service attack.Team Hacker Hotel Badge 2024 on risc-v (billboard modules) allows Flooding.This issue affects Hacker Hotel Badge 2024: from 0.1.0 through 0.1.3.</td>
        <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-21875">详情</a></td>
       </tr>
 
       <tr>
        <td>c18f644104374f1406554b8eb0aac334</td>
        <td>CVE-2024-25722</td>
-       <td>2024-02-11 05:15:08 <img src="imgs/new.gif" /></td>
+       <td>2024-02-11 05:15:08</td>
        <td>qanything_kernel/connector/database/mysql/mysql_client.py in qanything.ai QAnything before 1.2.0 allows SQL Injection.</td>
        <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-25722">详情</a></td>
       </tr>
 
       <tr>
        <td>a8d2b08352d488b713b5bfcb38282e3a</td>
        <td>CVE-2024-25718</td>
-       <td>2024-02-11 05:15:08 <img src="imgs/new.gif" /></td>
+       <td>2024-02-11 05:15:08</td>
        <td>In the Samly package before 1.4.0 for Elixir, Samly.State.Store.get_assertion/3 can return an expired session, which interferes with access control because Samly.AuthHandler uses a cached session and does not replace it, even after expiry.</td>
        <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-25718">详情</a></td>
       </tr>
 
       <tr>
        <td>1535be9aef679e5ce160f81f1c037be8</td>
        <td>CVE-2023-52428</td>
-       <td>2024-02-11 05:15:08 <img src="imgs/new.gif" /></td>
+       <td>2024-02-11 05:15:08</td>
        <td>In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.</td>
        <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2023-52428">详情</a></td>
       </tr>
 
       <tr>
        <td>ed12debe3aa15237e1ce625b8bdc75dc</td>
        <td>CVE-2023-52427</td>
-       <td>2024-02-11 04:15:08 <img src="imgs/new.gif" /></td>
+       <td>2024-02-11 04:15:08</td>
        <td>In OpenDDS through 3.27, there is a segmentation fault for a DataWriter with a large value of resource_limits.max_samples. NOTE: the vendor's position is that the product is not designed to handle a max_samples value that is too large for the amount of memory on the system.</td>
        <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2023-52427">详情</a></td>
       </tr>
 
       <tr>
        <td>061cfacf3d6ab6a1e6e3e8d698165661</td>
        <td>CVE-2024-25715</td>
-       <td>2024-02-11 03:15:09 <img src="imgs/new.gif" /></td>
+       <td>2024-02-11 03:15:09</td>
        <td>Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirect_uri.</td>
        <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-25715">详情</a></td>
       </tr>
 
       <tr>
        <td>a4a820edf24435c39dfeef8af4bfe37a</td>
        <td>CVE-2024-25714</td>
-       <td>2024-02-11 03:15:09 <img src="imgs/new.gif" /></td>
+       <td>2024-02-11 03:15:09</td>
        <td>In Rhonabwy through 1.1.13, HMAC signature verification uses a strcmp function that is vulnerable to side-channel attacks, because it stops the comparison when the first difference is spotted in the two signatures. (The fix uses gnutls_memcmp, which has constant-time execution.)</td>
        <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-25714">详情</a></td>
       </tr>
 
       <tr>
        <td>9db7aa02c0ee17ff06abc6c3e9eca064</td>
        <td>CVE-2024-1432</td>
-       <td>2024-02-11 03:15:08 <img src="imgs/new.gif" /></td>
+       <td>2024-02-11 03:15:08</td>
        <td>** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in DeepFaceLab pretrained DF.wf.288res.384.92.72.22 and classified as problematic. This issue affects the function apply_xseg of the file main.py. The manipulation leads to deserialization. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-253391. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</td>
        <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-1432">详情</a></td>
       </tr>
 
       <tr>
        <td>6b7d0373962eb9f3491ca8bb2120f89e</td>
        <td>CVE-2024-1431</td>
-       <td>2024-02-11 03:15:07 <img src="imgs/new.gif" /></td>
+       <td>2024-02-11 03:15:07</td>
        <td>A vulnerability was found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic. Affected by this issue is some unknown functionality of the file /debuginfo.htm of the component Web Management Interface. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may be used. VDB-253382 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.</td>
        <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-1431">详情</a></td>
       </tr>
 
       <tr>
        <td>a4f6a250e2a5cceccd57d833a0bc1d09</td>
        <td>CVE-2024-23724</td>
-       <td>2024-02-11 01:15:08 <img src="imgs/new.gif" /></td>
+       <td>2024-02-11 01:15:08</td>
        <td>Ghost through 5.76.0 allows stored XSS, and resultant privilege escalation in which a contributor can take over any account, via an SVG profile picture that contains JavaScript code to interact with the API on localhost TCP port 3001. NOTE: The discoverer reports that "The vendor does not view this as a valid vector."</td>
        <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-23724">详情</a></td>
       </tr>
 
       <tr>
        <td>4af14b5ecf1632767d889fe4108a3b5f</td>
        <td>CVE-2024-1430</td>
-       <td>2024-02-11 01:15:07 <img src="imgs/new.gif" /></td>
+       <td>2024-02-11 01:15:07</td>
        <td>A vulnerability has been found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /currentsetting.htm of the component Web Management Interface. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may be used. The identifier VDB-253381 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.</td>
        <td><a target="_blank" href="https://www.tenable.com/cve/CVE-2024-1430">详情</a></td>
       </tr>