Skip to content
OpenAdvisories

Archive

20 December 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2024-56331 Public exploit

    Local File Inclusion (LFI) via Improper URL Handling in uptime-kuma's `Real-Browser` monitor

    Uptime Kuma is an open source, self-hosted monitoring tool. An **Improper URL Handling Vulnerability** allows an attacker to access sensitive local files on the server by exploiting the `file:///` protocol. This vulnerability is triggered via the **"real-brow…

  • Medium 4.3
    CVE-2024-56348 Public exploit

    In JetBrains TeamCity before 2024.12 improper access control allowed viewing details of unauthorized agents