NVD disclosure day

Published threat advisories for January 7, 2025

CVE advisoryCRITICAL

CVE-2024-50660

AdPortal 3.0.39 File Upload Vulnerability Allows Remote Code Execution

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical file upload vulnerability in AdPortal allows unauthenticated remote attackers to execute arbitrary code by uploading malicious files. This could lead to a system compromise. Confirming the presence and accessibility of AdPortal in our environment is crucial for risk assessment.

NVD published:

CVE advisoryCRITICAL

CVE-2024-50658

AdPortal 3.0.39 Server-Side Template Injection leads to arbitrary code execution.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical Server-Side Template Injection vulnerability in AdPortal software allows unauthenticated remote attackers to execute arbitrary code by manipulating user information parameters. This could potentially lead to a compromise of the application if it is exposed to external networks.

NVD published: