Windows Server 2008 SP2 And R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold And R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, And 1703, And Windows Server 2016 Security Vulnerabilities

Exploiting Mistyped URLs

Interesting research: "Hyperlink Hijacking: Exploiting Erroneous URL Links to Phantom Domains": Abstract: Web users often follow hyperlinks hastily, expecting them to be correctly programmed. However, it is possible those links contain typos or other mistakes. By discovering active but erroneous...

caetanobavierabmw.pt Cross Site Scripting vulnerability OBB-3934443

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

businessrescueexpert.co.uk Cross Site Scripting vulnerability OBB-3934440

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

businessbroker.net Improper Access Control vulnerability OBB-3934439

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

cordenperimetersystems.co.uk Cross Site Scripting vulnerability OBB-3934434

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

fjaproducts.com Cross Site Scripting vulnerability OBB-3934435

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

indre44.fr Cross Site Scripting vulnerability OBB-3934433

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

changepeople.org Cross Site Scripting vulnerability OBB-3934432

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

events.armybenevolentfund.org Cross Site Scripting vulnerability OBB-3934430

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

Bypassing 2FA with phishing and OTP bots

Introduction Two-factor authentication (2FA) is a security feature we have come to expect as standard by 2024. Most of today's websites offer some form of it, and some of them won't even let you use their service until you enable 2FA. Individual countries have adopted laws that require certain...

buboquote.com Cross Site Scripting vulnerability OBB-3934423

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

brookstradingcourse.com Cross Site Scripting vulnerability OBB-3934421

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

brooksplace.org Cross Site Scripting vulnerability OBB-3934417

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

florisbooks.co.uk Cross Site Scripting vulnerability OBB-3934416

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

CVE-2022-4055 affecting package xdg-utils 1.1.3-7

CVE-2022-4055 affecting package xdg-utils 1.1.3-7. No patch is available...

CVE-2012-3381 affecting package sblim-sfcb 1.4.9-20

CVE-2012-3381 affecting package sblim-sfcb 1.4.9-20. No patch is available...

CVE-2012-2653 affecting package arpwatch 2.1a15-51

CVE-2012-2653 affecting package arpwatch 2.1a15-51. No patch is available...

CVE-2016-9179 affecting package lynx 2.9.0~dev.9-5

CVE-2016-9179 affecting package lynx 2.9.0~dev.9-5. This CVE either no longer is or was never...

CVE-2023-0687 affecting package glibc 2.35-7

CVE-2023-0687 affecting package glibc 2.35-7. This CVE either no longer is or was never...

CVE-2022-1941 affecting package grpc 1.42.0-7

CVE-2022-1941 affecting package grpc 1.42.0-7. This CVE either no longer is or was never...

CVE-2022-40898 affecting package python-wheel 0.33.6-7

CVE-2022-40898 affecting package python-wheel 0.33.6-7. No patch is available...

CVE-2016-2124 affecting package samba 4.12.5-6

CVE-2016-2124 affecting package samba 4.12.5-6. No patch is available...

CVE-2016-4912 affecting package openslp 2.0.0-26

CVE-2016-4912 affecting package openslp 2.0.0-26. No patch is available...

CVE-2022-43552 affecting package cmake 3.21.4-10

CVE-2022-43552 affecting package cmake 3.21.4-10. No patch is available...

CVE-2020-27748 affecting package xdg-utils 1.1.3-7

CVE-2020-27748 affecting package xdg-utils 1.1.3-7. No patch is available...

CVE-2019-16707 affecting package hunspell 1.7.0-7

CVE-2019-16707 affecting package hunspell 1.7.0-7. This CVE either no longer is or was never...

CVE-2010-4756 affecting package glibc 2.35-7

CVE-2010-4756 affecting package glibc 2.35-7. This CVE either no longer is or was never...

CVE-2023-25153 affecting package k3s for versions less than 1.25.5-7

CVE-2023-25153 affecting package k3s for versions less than 1.25.5-7. This CVE either no longer is or was never...

CVE-2016-1000104 affecting package mod_fcgid 2.3.9-21

CVE-2016-1000104 affecting package mod_fcgid 2.3.9-21. No patch is available...

CVE-2016-2568 affecting package polkit 0.119-3

CVE-2016-2568 affecting package polkit 0.119-3. No patch is available...

CVE-2016-8681 affecting package libdwarf for versions less than 0.9.0

CVE-2016-8681 affecting package libdwarf for versions less than 0.9.0. A patched version of the package is...

CVE-2023-44487 affecting package prometheus for versions less than 2.37.0-10

CVE-2023-44487 affecting package prometheus for versions less than 2.37.0-10. A patched version of the package is...

CVE-2022-3857 affecting package syslinux 6.04-10

CVE-2022-3857 affecting package syslinux 6.04-10. No patch is available...

CVE-2023-44487 affecting package cmake for versions less than 3.21.4-10

CVE-2023-44487 affecting package cmake for versions less than 3.21.4-10. A patched version of the package is...

CVE-2024-23653 affecting package moby-compose for versions less than 2.17.2-7

CVE-2024-23653 affecting package moby-compose for versions less than 2.17.2-7. A patched version of the package is...

CVE-2022-4904 affecting package grpc 1.42.0-7

CVE-2022-4904 affecting package grpc 1.42.0-7. No patch is available...

CVE-2023-23916 affecting package cmake 3.21.4-10

CVE-2023-23916 affecting package cmake 3.21.4-10. No patch is available...

CVE-2023-23915 affecting package cmake 3.21.4-10

CVE-2023-23915 affecting package cmake 3.21.4-10. No patch is available...

CVE-2021-46023 affecting package rust 1.72.0-7

CVE-2021-46023 affecting package rust 1.72.0-7. This CVE either no longer is or was never...

CVE-2022-36227 vulnerabilities

Vulnerabilities for packages:...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: ko, zarf, gitsign, vexctl, skaffold, kubescape, falcoctl, spire-server, slsa-verifier, tekton-chains, zot, policy-controller, wolfictl, apko, tkn, aactl, goreleaser, falco, neuvector-sigstore-interface, melange,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: kubevela, dynamic-localpv-provisioner, haproxy-ingress, prometheus-blackbox-exporter, terraform-provider-azurerm, nats, dotnet, secrets-store-csi-driver, kind, oauth2-proxy, prometheus-elasticsearch-exporter, minio, tomcat, falco, kaf, gitlab-runner,...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: ko, prometheus, ctop, kargo, telegraf, grype, kubescape, loki, spire-server, dagger, up, conftest, zot, wolfictl, tkn, syft, aactl, goreleaser, kaniko, buildkitd, buf, trivy, melange, crossplane, datadog-agent, docker-compose,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: argo-workflows, flux-kustomize-controller, gitsign, vexctl, cert-manager, kubescape, spire-server, vault, cloudflared, slsa-verifier, external-secrets-operator, tekton-chains, cosign, argo-cd, tkn, rekor, keda, oauth2-proxy, sops, aactl, tekton-pipelines, falco,...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: prometheus, ctop, k3d, skaffold, kpt, cert-manager, kubescape, loki, up, slsa-verifier, tekton-chains, aactl, tekton-pipelines, goreleaser, falco, k3s, bom, scorecard, paranoia,...

GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: ko, prometheus, ctop, kargo, telegraf, grype, kubescape, loki, spire-server, dagger, up, conftest, zot, wolfictl, tkn, syft, aactl, goreleaser, kaniko, buildkitd, buf, trivy, melange, crossplane, datadog-agent, docker-compose,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: nuclei, prometheus-operator, argo-workflows, litefs, runc, vexctl, hubble-ui, golangci-lint, kubevela, k9s, dynamic-localpv-provisioner, nerdctl, weaviate, haproxy-ingress, flux-image-automation-controller, terraform-provider-azurerm, kustomize,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: eksctl, kots, up, zarf, flux-helm-controller, helm-operator, k9s, cilium-cli, flux-source-controller, cert-manager, istio-operator, kubescape, zot, chartmuseum, trivy, k8sgpt,...

CVE-2024-0874 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, consul,...

GHSA-HMR7-M48G-48F6 vulnerabilities

Vulnerabilities for packages: cloudwatch-exporter,...