Command injection

A command injection vulnerability in the “showzysyncservercontents” function of the Zyxel NAS326 firmware version V5.21AAZF.14C0 and NAS542 firmware version V5.21ABAG.11C0 could allow an unauthenticated attacker to execute some operating system OS commands by sending a crafted HTTP POST request...

CVE-2023-24023

creationtimestamp| type| source ---|---|--- 2023-11-29 16:02:05+00:00| published-proof-of-concept| https://t.me/truesecator/5142 2023-11-29 18:09:25+00:00| published-proof-of-concept| https://t.me/SEReborn/4286 2023-11-29 18:46:00+00:00| seen|...

CVE-2020-0961

creationtimestamp| type| source ---|---|--- 2023-11-29 14:13:14+00:00| seen| https://t.me/arpsyndicate/749...

CVE-2023-4622

creationtimestamp| type| source ---|---|--- 2023-11-21 20:15:05+00:00| seen| https://t.me/arpsyndicate/318 2024-04-24 22:51:39+00:00| seen| https://t.me/arpsyndicate/4837 2025-02-14 10:08:16+00:00| seen| Telegram/OZTGhGxffczJOLYxRDsnzD7Tk3-jXfZZz6QinbuRb9TVyL26 2026-08-27 12:00:09+00:00| seen|...

CVE-2023-48365

Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attacker is able to elevate their privilege by tunneling HTTP requests, allowing them to execute HTTP requests on the backe...

PostgreSQL 11.x < 11.22 / 12.x < 12.17 / 13.x < 13.13 / 14.x < 14.10 / 15.x < 15.5 / 16.x < 16.1 Multiple Vulnerabilities

The version of PostgreSQL installed on the remote host is 11 prior to 11.22, 12 prior to 12.17, 13 prior to 13.13, 14 prior to 14.10, 15 prior to 15.5, or 16 prior to 16.1. As such, it is potentially affected by multiple vulnerabilities: - Missing overflow checks let authenticated database users...

shoraipower.com Cross Site Scripting vulnerability OBB-3780626

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

.NET 7.0 Update - November 14, 2023 (KB5032884)

None None...

Description of the security update for Microsoft Exchange Server 2016: November 14, 2023 (KB5032147)

None None...

November 14, 2023-KB5032007 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 22H2 and Windows 11, version 23H2

None None...

.NET 6.0 Update - November 14, 2023 (KB5032883)

None None...

reef-aquarium-store.com Cross Site Scripting vulnerability OBB-3780562

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-38363

creationtimestamp| type| source ---|---|--- 2023-11-14 04:30:10+00:00| seen| Telegram/Xuv9fhp-UuFuf7UHF5jrvo1iq0dk2OMJLDlDI33-NRaj1hU...

potravinynieotraviny.sk Cross Site Scripting vulnerability OBB-3780515

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-42480

creationtimestamp| type| source ---|---|--- 2023-11-14 04:01:10+00:00| seen| Telegram/RQk2G1GQmlRugkOer6NlboRvlmxHxvBe-vntejn-kFmPhw...

CVE-2023-45558

creationtimestamp| type| source ---|---|--- 2023-11-14 03:59:22+00:00| seen| Telegram/683fRtoXBwE2LRJHQRDMJo8i6V97IeflQe3wXlfg62NkrA...

pet-az.com Cross Site Scripting vulnerability OBB-3780481

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

nutritfort.md Cross Site Scripting vulnerability OBB-3780453

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

veganisten.de Improper Access Control vulnerability OBB-3780363

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tsv-kirchhain-fussball.de Improper Access Control vulnerability OBB-3780337

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...