Skip to content
OpenAdvisories

Archive

30 December 2024

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.4
    CVE-2024-56800 Public exploit

    Firecrawl has SSRF Vulnerability via malicious scrape target

    Firecrawl is a web scraper that allows users to extract the content of a webpage for a large language model. Versions prior to 1.1.1 contain a server-side request forgery (SSRF) vulnerability. The scraping engine could be exploited by crafting a malicious sit…

  • Medium 6.9
    CVE-2024-56801 Public exploit

    Tasklists has Blind SQL Injection in /ajax/reorder.php

    Tasklists provides plugin tasklists for GLPI. Versions prior to 2.0.4 have a blind SQL injection vulnerability. Version 2.0.4 contains a patch for the vulnerability.

  • Critical 9.9
    CVE-2024-12828 Public exploit EPSS 33%

    Webmin CGI Command Injection Remote Code Execution Vulnerability

    Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists with…