Skip to content
OpenAdvisories

Archive

18 September 2024

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2024-46986 Public exploit Scanner template EPSS 37%

    Arbitrary file write leading to RCE in Camaleon CMS

    Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. An arbitrary file write vulnerability accessible via the upload method of the MediaController allows authenticated users to write arbitrary files to any location on the w…

  • Critical 9.8
    CVE-2024-46377 Public exploit

    Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the save_settings() function…

  • Critical 9.8
    CVE-2024-44542 Public exploit

    SQL Injection vulnerability in todesk v.1.1 allows a remote attacker to execute arbitrary code via the /todesk.com/news…