sportfixing.com Improper Access Control vulnerability OBB-3812294

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-42883

creationtimestamp| type| source ---|---|--- 2023-12-13 13:10:05+00:00| seen| https://t.me/truesecator/5195 2023-12-13 14:54:23+00:00| seen| https://t.me/BitLenta/22126 2024-01-01 17:41:38+00:00| seen| https://t.me/ctinow/161387 2024-01-01 17:41:39+00:00| seen| https://t.me/ctinow/161388 2024-01-0...

CVE-2023-42890

creationtimestamp| type| source ---|---|--- 2023-12-13 13:10:05+00:00| seen| https://t.me/truesecator/5195 2023-12-13 14:54:23+00:00| seen| https://t.me/BitLenta/22126 2023-12-18 10:21:23+00:00| seen| Telegram/sKOPeOaAov2SW-QAkgiOK8lbZ9tZD5S6WM2MdNWvdiLgLHY 2024-01-01 15:36:50+00:00| seen|...

vatikacollections.com Cross Site Scripting vulnerability OBB-3811947

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

listzero.com Cross Site Scripting vulnerability OBB-3811766

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

korganicboard.org Cross Site Scripting vulnerability OBB-3811755

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

jccac.org.hk Cross Site Scripting vulnerability OBB-3811745

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

gravestonephotos.com Cross Site Scripting vulnerability OBB-3811718

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

atelierflame.ocnk.net Cross Site Scripting vulnerability OBB-3811593

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

chenduxiu.net Cross Site Scripting vulnerability OBB-3811538

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fein.appskorea.net Cross Site Scripting vulnerability OBB-3811451

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fujiyamamedaka.ocnk.net Cross Site Scripting vulnerability OBB-3811352

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rotarex.com Cross Site Scripting vulnerability OBB-3811335

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Code injection

Laf is a cloud development platform. Prior to version 1.0.0-beta.13, the control of LAF app enV is not strict enough, and in certain scenarios of privatization environment, it may lead to sensitive information leakage in secret and configmap. In ES6 syntax, if an obj directly references another...

Russian APT28 Hackers Targeting 13 Nations in Ongoing Cyber Espionage Campaign

The Russian nation-state threat actor known as APT28 has been observed making use of lures related to the ongoing Israel-Hamas war to facilitate the delivery of a custom backdoor called HeadLace. IBM X-Force is tracking the adversary under the name ITG05, which is also known as BlueDelta, Fancy...

PT-2023-30742 · Laf · Laf

Name of the Vulnerable Software and Affected Versions: Laf versions prior to 1.0.0-beta.13 Description: Laf is a cloud development platform where the control of LAF app environment variables is not strict enough, potentially leading to sensitive information leakage in secret and configmap. This...

CVE-2016-5065

creationtimestamp| type| source ---|---|--- 2023-12-11 13:33:43+00:00| seen| https://t.me/arpsyndicate/1744...

CVE-2023-5868 vulnerabilities

Vulnerabilities for packages: postgresql...

CVE-2023-5869 vulnerabilities

Vulnerabilities for packages: postgresql...

DockerSpawner allows any image by default

Impact Users of JupyterHub deployments running DockerSpawner starting with 0.11.0 without specifying DockerSpawner.allowedimages configuration allow users to launch any pullable image, instead of restricting to only the single configured image, as intended. Patches Upgrade to DockerSpawner 13...