CVE-2024-47048: Rocket.Chat Stored XSS Vulnerability
<p>A stored cross-site scripting (XSS) vulnerability was discovered in Rocket.Chat versions 6.12.0 and earlie</p>
THREAT INTELLIGENCE · RESEARCH · COMMUNITYSecurity news,
Security news,
without the noise.
Practical coverage of vulnerabilities, emerging threats, and the tools shaping modern security.
Latest intelligence
7 articlesExploit Title: Reflected XSS in Elaine's Realtime CRM Automation v6.18.17 CVE-2024-42831
<p>A reflected cross-site scripting (XSS) vulnerability in Elaine's Realtime CRM Automation v6.18.17 allows attackers to execute arbitrary JavaScript code in the web browser</p>
CVE-2024-36401 (GeoServer RCE)
<p>CVE-2024-36401 is a critical Remote Code Execution vulnerability in GeoServer, specifically targeting the Web Feature Service (WFS) endpoint. By sending a specially crafted GET request, an attacker can execute arbitrary Java code via the valueReference parameter of a WFS request. This allows attackers to run system-level commands remotely on the server.</p>