XI

Exodus Intelligence

CVEs, 365 days037 all time, 0 rejected
Quality-median 99%
CVSS by the CNA-share of records
CWE-share of records
Affected versions-not n/a or unspecified
CVSS added by CISA-lower is better
OrganisationExodus Intelligence
RoleCNA
TypeBug Bounty Provider, Researcher
Reports tomitre
ScopeVulnerabilities discovered by Exodus Intelligence as well as acquisitions from independent researchers via its Research Sponsorship Program (RSP).
Advisorieshttps://blog.exodusintel.com/advisories/
  • CVE-2024-24622 2024-07-25 · CVSS 8.8
    Softaculous Webuzo contains a command injection in the password reset functionality. A remote, authenticated attacker can exploit this vulnerability to gain cod
  • CVE-2024-24623 2024-07-25 · CVSS 8.8
    Softaculous Webuzo contains a command injection vulnerability in the FTP management functionality. A remote, authenticated attacker can exploit this vulnerabili
  • CVE-2024-24621 2024-07-25 · CVSS 9.8
    Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, anonymous attackers can exploit this vulner
  • CVE-2024-23630 2024-01-25 · CVSS 9.0
    An arbitrary firmware upload vulnerability exists in the Motorola MR2600. An attacker can exploit this vulnerability to achieve code execution on the device.
  • CVE-2024-23629 2024-01-25 · CVSS 9.6
    An authentication bypass vulnerability exists in the web component of the Motorola MR2600. An attacker can exploit this vulnerability to access protected URLs a
  • CVE-2024-23628 2024-01-25 · CVSS 9.0
    A command injection vulnerability exists in the 'SaveStaticRouteIPv6Params' parameter of the Motorola MR2600. A remote attacker can exploit this vulnerability
  • CVE-2024-23627 2024-01-25 · CVSS 9.0
    A command injection vulnerability exists in the 'SaveStaticRouteIPv4Params' parameter of the Motorola MR2600. A remote attacker can exploit this vulnerability t
  • CVE-2024-23626 2024-01-25 · CVSS 9.0
    A command injection vulnerability exists in the ‘SaveSysLogParams’ parameter of the Motorola MR2600. A remote attacker can exploit this vulnerability to achie
  • CVE-2024-23625 2024-01-25 · CVSS 9.6
    A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerab
  • CVE-2024-23624 2024-01-25 · CVSS 9.6
    A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain c
  • CVE-2024-23622 2024-01-25 · CVSS 10.0
    A stack-based buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability
  • CVE-2024-23621 2024-01-25 · CVSS 10.0
    A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve
  • CVE-2024-23620 2024-01-25 · CVSS 8.8
    An improper privilege management vulnerability exists in IBM Merge Healthcare eFilm Workstation. A local, authenticated attacker can exploit this vulnerability
  • CVE-2024-23619 2024-01-25 · CVSS 9.8
    A hardcoded credential vulnerability exists in IBM Merge Healthcare eFilm Workstation. A remote, unauthenticated attacker can exploit this vulnerability to achi
  • CVE-2024-23618 2024-01-25 · CVSS 9.6
    An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve co
  • CVE-2024-23617 2024-01-25 · CVSS 9.6
    A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerabi
  • CVE-2024-23616 2024-01-25 · CVSS 10.0
    A buffer overflow vulnerability exists in Symantec Server Management Suite version 7.9 and before. A remote, anonymous attacker can exploit this vulnerability t
  • CVE-2024-23615 2024-01-25 · CVSS 10.0
    A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this vulnerability to ac
  • CVE-2024-23614 2024-01-25 · CVSS 10.0
    A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerability to ach
  • CVE-2024-23613 2024-01-25 · CVSS 10.0
    A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit
  • CVE-2023-43824 2024-01-18 · CVSS 8.8
    A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTitleTextLen field of a DPS file. A remote, unau
  • CVE-2023-43823 2024-01-18 · CVSS 8.8
    A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTTitleLen field of a DPS file. A remote, unauthe
  • CVE-2023-43822 2024-01-18 · CVSS 8.8
    A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesTimeLen field of a DPS file. A remote,
  • CVE-2023-43821 2024-01-18 · CVSS 8.8
    A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesActionLen field of a DPS file. A remote
  • CVE-2023-43820 2024-01-18 · CVSS 8.8
    A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesPrevValueLen field of a DPS file. A rem

All CVE Program partners