ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Vulnerabilities

5 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

ShowKEV onlyPublic PoCCVSS ≥ 9CVSS ≥ 7EPSS ≥ 10%EPSS ≥ 50%Window24h7d30d90dAll
StackAllWordPressE-commerceDrupalJoomlanpmpipMavenGoPackagistRubyGemsNuGet
SortpublishedepsscvssKEV dateupdatedvendor: adive ✕
CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2024-4337
+1 in the same advisory: …4336
Adive Framework 2.0.8, does not sufficiently encode user-controlled inputs, resulting in a persistent Cross-Site Scripting (XSS) vulnerability via the /adive/ad

Adive Framework 2.0.8, does not sufficiently encode user-controlled inputs, resulting in a persistent Cross-Site Scripting (XSS) vulnerability via the /adive/admin/nav/add, in multiple parameters. This vulnerability allows an attacker to retrieve the session details of an authenticated user.

NVD description · AI analysis pending		7.4<1%
  • adive framework
—
CVE-2020-7991
+2 in the same advisory: …7990 …7989
Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password.

Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password.

NVD description · AI analysis pending		8.8
group max
3% PoC ×2
  • adive framework
—