PT-2023-32405 · Pkp · Pkp-Lib

Name of the Vulnerable Software and Affected Versions: pkp/pkp-lib versions prior to 3.3.0-16 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository pkp/pkp-lib. Recommendations: For versions prior to 3.3.0-16, update to version 3.3.0-16 or later to resolve...

PT-2023-32407 · Pkp · Pkp-Lib

Name of the Vulnerable Software and Affected Versions: pkp/pkp-lib versions prior to 3.3.0-16 Description: The issue is related to Cross-Site Request Forgery. Recommendations: For versions prior to 3.3.0-16, update to version 3.3.0-16 or later to resolve the issue...

PKP Open Journals System Cross-Site Scripting Vulnerability

PKP Open Journals System is a journal system. A cross-site scripting vulnerability exists in PKP Open Journals System prior to version 3.3.0-16, which stems from the fact that certain inputs are not escaped and can be exploited by an attacker to inject malicious script into a web site...

SUSE SLES15 Security Update : kernel (Live Patch 16 for SLE 15 SP4) (SUSE-SU-2023:4301-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4301-1 advisory. This update for the Linux Kernel 5.14.21-1504002481 fixes several issues. The following security issues were fixed: - CVE-2023-4147: Fixed...

PT-2023-32408 · Pkp · Pkp-Lib

Name of the Vulnerable Software and Affected Versions: pkp/pkp-lib versions prior to 3.3.0-16 Description: The issue concerns an Unrestricted Upload of File with Dangerous Type and Cross-site Scripting. Recommendations: For versions prior to 3.3.0-16, update to version 3.3.0-16 or later to resolv...

PT-2023-32410 · Public Knowledge · Pkp-Lib

Name of the Vulnerable Software and Affected Versions: pkp-lib versions prior to 3.3.0-16 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing attackers to inject malicious scripts. This can...

PT-2023-32396 · Pkp-Lib · Pkp-Lib

Name of the Vulnerable Software and Affected Versions: pkp/pkp-lib versions prior to 3.3.0-16 Description: The issue is related to insufficient session expiration in the GitHub repository pkp/pkp-lib. Recommendations: For versions prior to 3.3.0-16, update to version 3.3.0-16 or later to resolve...

CVE-2023-5796

creationtimestamp| type| source ---|---|--- 2023-10-26 22:16:01+00:00| seen| https://t.me/cibsecurity/72994...

Rocky Linux 8 : nodejs:16 (RLSA-2023:5850)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:5850 advisory. - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wil...

RHEL 8 : nodejs:16 (RHSA-2023:5850)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:5850 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes...

CVE-2023-42627

creationtimestamp| type| source ---|---|--- 2023-10-17 16:32:58+00:00| seen| https://t.me/cibsecurity/72421 2023-12-28 19:16:28+00:00| seen| https://t.me/ctinow/160156 2025-06-12 15:34:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18185...

Open Journal Systems Cross-Site Request Forgery Vulnerability

Open Journal Systems OJS is an open source system for managing peer-reviewed academic journals. A cross-site request forgery vulnerability exists in Open Journal Systems versions prior to 3.3.0-16 that stems from the presence of a cross-site request forgery CSRF vulnerability...

RHEL 8 : nodejs:16 (RHSA-2023:5803)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:5803 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes...

CVE-2023-45984

creationtimestamp| type| source ---|---|--- 2023-10-16 22:32:10+00:00| seen| https://t.me/cibsecurity/72335...

CVE-2023-45660

creationtimestamp| type| source ---|---|--- 2023-10-16 22:32:09+00:00| seen| https://t.me/cibsecurity/72334...

CVE-2023-46066

creationtimestamp| type| source ---|---|--- 2023-10-16 16:31:45+00:00| seen| https://t.me/cibsecurity/72313...

CVE-2023-36950

creationtimestamp| type| source ---|---|--- 2023-10-16 12:36:40+00:00| seen| https://t.me/cibsecurity/72309...

CVE-2023-5591

creationtimestamp| type| source ---|---|--- 2023-10-16 07:44:26+00:00| seen| https://t.me/cibsecurity/72300...

CVE-2021-44909

creationtimestamp| type| source ---|---|--- 2023-10-16 04:05:41+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5435...

CVE-2023-5589

creationtimestamp| type| source ---|---|--- 2023-10-16 02:36:10+00:00| seen| https://t.me/cibsecurity/72295 2025-06-16 17:38:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18489...