youparking.com.tw Cross Site Scripting vulnerability OBB-3884981

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tokuco.ac.jp Cross Site Scripting vulnerability OBB-3884963

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

nauticafeltrinelli.it Cross Site Scripting vulnerability OBB-3884906

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Youzify Buddypress Moderation Plugin <= 1.2.5 is vulnerable to Cross Site Scripting (XSS)

Software Youzify Buddypress Moderation Type Plugin Vulnerable versions = 1.2.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-2864 Patch priority High CVSS severity High 7.3 Developer Claim ownership PSID 8372e235157d Credits Esteban Segura Ripoll...

WordPress EmbedPress Plugin <= 3.9.12 is vulnerable to Cross Site Scripting (XSS)

Software EmbedPress Type Plugin Vulnerable versions = 3.9.12 Fixed in 3.9.13 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2468 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f376585935a4 Credits wesley wcraft Required...

WordPress WCFM – Frontend Manager for WooCommerce Plugin <= 6.7.8 is vulnerable to Cross Site Scripting (XSS)

Software WCFM – Frontend Manager for WooCommerce Type Plugin Vulnerable versions = 6.7.8 Fixed in 6.7.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29929 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 3615c0b97947 Credits Steven Julian...

WordPress Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more Plugin <= 4.5.24 is vulnerable to Cross Site Scripting (XSS)

Software Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more Type Plugin Vulnerable versions = 4.5.24 Fixed in 4.5.25 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29795 Patch priority Low CVSS severity Low 6.5 Developer Claim...

WordPress WooCommerce Clover Payment Gateway Plugin <= 1.3.1 is vulnerable to Broken Access Control

Software WooCommerce Clover Payment Gateway Type Plugin Vulnerable versions = 1.3.1 Fixed in 1.3.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-0626 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 06c0aefba99a Credits Francesco...

WordPress Premium Packages Plugin <= 5.8.2 is vulnerable to Cross Site Scripting (XSS)

Software Premium Packages Type Plugin Vulnerable versions = 5.8.2 Fixed in 5.8.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29924 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID fd83d5609f73 Credits Yudistira Arya Required privile...

WordPress WP Post Disclaimer Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

Software WP Post Disclaimer Type Plugin Vulnerable versions = 1.0.3 Fixed in 1.0.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29761 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 45270e929eab Credits LVT-tholv2k Required privilege...

Ubuntu: Security Advisory (USN-6686-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6705-1: Linux kernel (AWS) vulnerabilities

It was discovered that the DesignWare USB3 for Qualcomm SoCs driver in the Linux kernel did not properly handle certain error conditions during device registration. A local attacker could possibly use this to cause a denial of service system crash. CVE-2023-22995 It was discovered that the NVIDIA...

USN-6686-3: Linux kernel (Oracle) vulnerabilities

It was discovered that the DesignWare USB3 for Qualcomm SoCs driver in the Linux kernel did not properly handle certain error conditions during device registration. A local attacker could possibly use this to cause a denial of service system crash. CVE-2023-22995 It was discovered that a race...

USN-6680-3: Linux kernel (AWS) vulnerabilities

黄思聪 discovered that the NFC Controller Interface NCI implementation in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service system crash...

CVE-2019-20168

creationtimestamp| type| source ---|---|--- 2024-03-18 17:17:25+00:00| seen| https://t.me/ctinow/210746...

CVE-2024-26636

creationtimestamp| type| source ---|---|--- 2024-03-18 12:27:08+00:00| seen| https://t.me/ctinow/210453 2024-03-18 15:31:25+00:00| seen| https://t.me/ctinow/210653 2025-03-10 19:39:12+00:00| seen| Telegram/cpOkt43IhGn2UY6cTygd3CJceEO7RPgVQTkfWpcaeuCDw52 2025-08-14 10:00:00+00:00| seen|...

CVE-2024-26635

creationtimestamp| type| source ---|---|--- 2024-03-18 12:27:07+00:00| seen| https://t.me/ctinow/210452 2024-03-18 15:31:26+00:00| seen| https://t.me/ctinow/210654 2025-03-10 19:39:12+00:00| published-proof-of-concept| Telegram/7PxoCsXPWrPPxeu2n1CL3qE8eSUX53oIJFcOf-AKyXZ8t 2025-08-14...

CVE-2023-52619

creationtimestamp| type| source ---|---|--- 2024-03-18 12:27:01+00:00| seen| https://t.me/ctinow/210446 2024-03-18 15:12:04+00:00| seen| https://t.me/ctinow/210603 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-15...

CVE-2023-52617

creationtimestamp| type| source ---|---|--- 2024-03-18 12:26:56+00:00| seen| https://t.me/ctinow/210444 2024-03-18 15:12:06+00:00| seen| https://t.me/ctinow/210605 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-15...

CVE-2024-29156

creationtimestamp| type| source ---|---|--- 2024-03-18 08:21:35+00:00| seen| https://t.me/ctinow/210260 2024-03-18 08:26:46+00:00| seen| https://t.me/ctinow/210261 2024-04-09 11:11:05+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10275 2024-08-16 09:16:45+00:00| seen|...