Exploit for CVE-2025-29927

Scanner de Vulnerabilidade Middleware Subrequest do Next.js U...

CVE-2024-11173

An unhandled exception in the danny-avila/librechat repository, version git 600d217, can cause the server to crash, leading to a full denial of service. This issue occurs when certain API endpoints receive malformed input, resulting in an uncaught exception. Although a valid JWT is required to...

vita34.de Cross Site Scripting vulnerability OBB-4038560

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

duel-de-mots.com Cross Site Scripting vulnerability OBB-4037298

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Innovación y Cualificación 安全漏洞

Innovación y Cualificación is an e-learning solution from Innovación y Cualificación. Innovación y Cualificación has a security vulnerability that stems from improper access control and could lead to an attacker gaining access to sensitive information of other users...

Innovación y Cualificación 安全漏洞

Innovación y Cualificación is an e-learning solution from Innovación y Cualificación. Innovación y Cualificación suffers from a security vulnerability that originates from SQL injection and could lead to an attacker obtaining, updating, and deleting database data via injected SQL queries...

Innovación y Cualificación SQL注入漏洞

Innovación y Cualificación is an e-learning solution from Innovación y Cualificación. Innovación y Cualificación suffers from an SQL injection vulnerability that originates from SQL injection and could lead to an attacker obtaining, updating, and deleting database data via injected SQL queries...

Creating Scripts to Identify Vulnerable Telnet Services

This whitepaper covers how to create Nmap scripts to identify banners and versions of Telnet servers. It also covers methods to mitigate the public visibility of banners and version information on Telnet servers. Written in Portuguese...

Innovación y Cualificación 安全漏洞

Innovación y Cualificación is an e-learning solution from Innovación y Cualificación. Innovación y Cualificación has a security vulnerability that stems from improper access control and could lead to an attacker gaining access to sensitive information of other users...

CVE-2025-26895

CVE-2025-26895 affects the WordPress plugin m1.DownloadList (versions up to and including 0.19). The vulnerability is a DOM-based XSS flaw introduced during web page generation, enabling injected scripts when a page is rendered. The CVE records indicate an affected plugin and a fixed/Patched stat...

CVE-2025-1526: Improper Neutralization of Input During Web Page Generation

The DethemeKit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the De Product Display Widget countdown feature in all versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

PT-2025-11251

Name of the Vulnerable Software and Affected Versions: DethemeKit for Elementor plugin for WordPress versions up to, and including, 2.1.9 Description: The issue is related to Stored Cross-Site Scripting via the De Product Display Widget's countdown feature, caused by insufficient input sanitizati...

duel-de-mots.com Cross Site Scripting vulnerability OBB-4035488

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

service.bnn.de Cross Site Scripting vulnerability OBB-4034547

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

seebee.de Cross Site Scripting vulnerability OBB-4033265

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2025-16720

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an integer overflow in the hdr first de function within the fs/ntfs3 component of the Linux kernel. This occurs when the de off and used variables, which are...

CVE-2025-27342

Cross-Site Request Forgery CSRF vulnerability in josesan WooCommerce Recargo de Equivalencia woo-recargo-de-equivalencia allows Cross Site Request Forgery.This issue affects WooCommerce Recargo de Equivalencia: from n/a through = 1.6.24...

CVE-2025-27342

Cross-Site Request Forgery CSRF vulnerability in josesan WooCommerce Recargo de Equivalencia woo-recargo-de-equivalencia allows Cross Site Request Forgery.This issue affects WooCommerce Recargo de Equivalencia: from n/a through = 1.6.24...

WordPress WooCommerce Recargo de Equivalencia Plugin <= 1.6.24 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WooCommerce Recargo de Equivalencia versions = 1.6.24...

CVE-2025-27342

CVE-2025-27342: CSRF vulnerability in WordPress plugin WooCommerce Recargo de Equivalencia affects versions up to 1.6.24. The CVE description states CSRF could be triggered by authenticated or non-authenticated interactions? The initial doc lists CVSS 3.1 base score 4.3 (AV:N/AC:L/PR:N/UI:R/S:U/C...