student.asher.edu Cross Site Scripting vulnerability OBB-3259646

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-26382

creationtimestamp| type| source ---|---|--- 2023-04-13 00:24:46+00:00| seen| https://t.me/cibsecurity/62031...

CVE-2023-26395

creationtimestamp| type| source ---|---|--- 2023-04-13 00:24:44+00:00| seen| https://t.me/cibsecurity/62029...

CVE-2023-24545

creationtimestamp| type| source ---|---|--- 2023-04-13 00:24:35+00:00| seen| https://t.me/cibsecurity/62022...

CVE-2023-26404

creationtimestamp| type| source ---|---|--- 2023-04-13 00:24:27+00:00| seen| https://t.me/cibsecurity/62017...

CVE-2023-26408

creationtimestamp| type| source ---|---|--- 2023-04-13 00:24:23+00:00| seen| https://t.me/cibsecurity/62016...

CVE-2023-26424

creationtimestamp| type| source ---|---|--- 2023-04-13 00:24:22+00:00| seen| https://t.me/cibsecurity/62014...

CVE-2022-3404

creationtimestamp| type| source ---|---|--- 2023-04-13 00:24:20+00:00| seen| https://t.me/cibsecurity/62012...

WordPress Waiting: One-click countdowns Plugin <= 0.6.2 is vulnerable to SQL Injection

Software Waiting: One-click countdowns Type Plugin Vulnerable versions = 0.6.2 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-28659 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID bd389c037bcc Credits Joshua Martinelle Tenable Research...

WordPress Watu Quiz Plugin <= 3.3.9.2 is vulnerable to Cross Site Scripting (XSS)

Software Watu Quiz Type Plugin Vulnerable versions = 3.3.9.2 Fixed in 3.3.9.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30483 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 28220b6a7407 Credits Skalucy Required...

WordPress Forminator Plugin <= 1.22.1 is vulnerable to Broken Access Control

Software Forminator Type Plugin Vulnerable versions = 1.22.1 Fixed in 1.23.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority Medium CVSS severity Medium 5.4 Developer WPMU DEV PSID 38229dd9fbd0 Credits Unknown Required privilege Subscriber...

WordPress Ultimate Noindex Nofollow Tool II Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Ultimate Noindex Nofollow Tool II Type Plugin Vulnerable versions = 1.3 Fixed in 1.3.4 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-30474 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7969630e3d3c Credits Abd...

WordPress CoSchedule Plugin <= 3.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software CoSchedule Type Plugin Vulnerable versions = 3.3.8 Fixed in 3.3.9 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47165 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 13c282a9267d Credits István Márton Required...

Mozilla Firefox Security Advisory (MFSA2023-13) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Adobe InCopy < 17.4.1 / 18.0 < 18.2.0 Arbitrary code execution (APSB23-13)

The version of Adobe InCopy installed on the remote host is prior to 17.4.1, 18.2.0. It is, therefore, affected by a vulnerability as referenced in the APSB23-13 advisory. - InCopy versions 18.1 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could result in...

CVE-2022-46709

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, iOS 16. An app may be able to execute arbitrary code with kernel privileges...

Memory corruption

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, iOS 16. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-46709

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, iOS 16. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-46709

CVE-2022-46709 is a memory corruption issue addressed with improved state management in macOS Ventura 13 and iOS 16. The vulnerability could allow an app to execute arbitrary code with kernel privileges. Affected components/contexts are not detailed beyond the Apple security updates references, a...

AlmaLinux 8 : postgresql:13 (ALSA-2023:1576)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:1576 advisory. postgresql: Extension scripts replace objects not belonging to the extension. CVE-2022-2625 postgresql: Client memory disclosure when connecting with...