WordPress WooCommerce Ninja Forms Product Add-ons Plugin <= 1.7.0 is vulnerable to Arbitrary File Upload

Software WooCommerce Ninja Forms Product Add-ons Type Plugin Vulnerable versions = 1.7.0 Fixed in 1.7.1 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2023-5601 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 2bbb91735283 Credits Alexander Concha...

WordPress Contact Form builder with drag & drop - Kali Forms Plugin <= 2.3.27 is vulnerable to Broken Access Control

Software Contact Form builder with drag & drop - Kali Forms Type Plugin Vulnerable versions = 2.3.27 Fixed in 2.3.28 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-46083 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 538b41872f6e...

WordPress Broken Link Checker | Finder Plugin <= 2.4.2 is vulnerable to Broken Access Control

Software Broken Link Checker | Finder Type Plugin Vulnerable versions = 2.4.2 Fixed in 2.5.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-46082 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID cfffdd260ad0 Credits Abdi Prana...

WordPress WooCommerce PDF Invoice Builder Plugin <= 1.2.103 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce PDF Invoice Builder Type Plugin Vulnerable versions = 1.2.103 Fixed in 1.2.104 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46076 Patch priority High CVSS severity High 7.1 Developer Edgar Rojas PSID e196625e8b7e Credits LEE S...

WordPress EG-Attachments Plugin <= 2.1.3 is vulnerable to Cross Site Scripting (XSS)

Software EG-Attachments Type Plugin Vulnerable versions = 2.1.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46070 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 04006798b0e0 Credits Le Ngoc Anh Required...

nodejs security and bug fix update

An update is available for nodejs. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Node.js is a software development platform for building fast and scalable...

RLSA-2023:5532 Important: nodejs security and bug fix update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: Permissions policies can be bypassed via Module.load CVE-2023-32002 nodejs: Permissions policies can impersonate other modules in using...

CVE-2023-45463

creationtimestamp| type| source ---|---|--- 2023-10-13 16:29:11+00:00| seen| https://t.me/cibsecurity/72244...

sneldersbroodenbanketlokaal.nl Cross Site Scripting vulnerability OBB-3743347

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-45048

creationtimestamp| type| source ---|---|--- 2023-10-12 16:23:12+00:00| seen| https://t.me/cibsecurity/72171...

CVE-2023-44111

creationtimestamp| type| source ---|---|--- 2023-10-11 16:28:36+00:00| seen| https://t.me/cibsecurity/72099...

CVE-2023-44095

creationtimestamp| type| source ---|---|--- 2023-10-11 16:22:42+00:00| seen| https://t.me/cibsecurity/72091...

CVE-2023-41304

creationtimestamp| type| source ---|---|--- 2023-10-11 16:22:33+00:00| seen| https://t.me/cibsecurity/72086...

CVE-2023-41964

creationtimestamp| type| source ---|---|--- 2023-10-10 16:16:54+00:00| seen| https://t.me/cibsecurity/71931...

AZL-31336 CVE-2023-44487 affecting package node-problem-detector for versions less than 0.8.10-16

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

CVE-2023-45247

creationtimestamp| type| source ---|---|--- 2023-10-09 16:16:06+00:00| seen| https://t.me/cibsecurity/71838 2023-11-01 13:42:51+00:00| seen| https://t.me/ETHICALHACKERSCOMMUNITY2/3224 2025-06-16 17:37:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18478...

CVE-2023-5101

creationtimestamp| type| source ---|---|--- 2023-10-09 16:16:01+00:00| seen| https://t.me/cibsecurity/71834...

CVE-2023-43696

creationtimestamp| type| source ---|---|--- 2023-10-09 16:15:57+00:00| seen| https://t.me/cibsecurity/71831...

CVE-2023-45248

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 36497, Acronis Cyber Protect 16 Windows before build 37391...

CVE-2023-45248

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 36497, Acronis Cyber Protect 16 Windows before build 37391...