CVE-2023-39923

creationtimestamp| type| source ---|---|--- 2023-10-03 16:41:14+00:00| seen| https://t.me/cibsecurity/71490...

Internet Bug Bounty: Permissions policies can be bypassed via Module._load and require.extensions (High) (CVE-2023-30587)

A vulnerability in the experimental permissions policy mechanism in Node.js was reported. The use of Module.load could bypass the policy and require unauthorized modules. This affected all active release lines. The vulnerability was reported by a researcher and fixed by the Node.js security team...

GLSA-202309-16 : wpa_supplicant, hostapd: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202309-16 wpasupplicant, hostapd: Multiple Vulnerabilities - In wpasupplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c. CVE-2021-30004 - The...

CVE-2002-0419

creationtimestamp| type| source ---|---|--- 2023-09-29 16:47:35+00:00| seen| Telegram/ur-Lyd49VHpxKoXkjESwJUgOnBG7v2peqoTg0PaObyDQ...

CVE-2023-43909

creationtimestamp| type| source ---|---|--- 2023-09-29 16:37:37+00:00| seen| https://t.me/cibsecurity/71287...

GitLab 16.0.0 < 16.2.8 / 16.3 < 16.3.5 / 16.4 < 16.4.1 (CVE-2023-5207)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. An authenticated attacker could perform arbitra...

AlmaLinux 8 : nodejs:16 (ALSA-2023:5360)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:5360 advisory. nodejs: Permissions policies can be bypassed via Module.load CVE-2023-32002 nodejs-semver: Regular expression denial of service CVE-2022-25883 nodejs:...

CVE-2023-41302

creationtimestamp| type| source ---|---|--- 2023-09-25 16:39:23+00:00| seen| https://t.me/cibsecurity/70992...

CVE-2023-41297

creationtimestamp| type| source ---|---|--- 2023-09-25 16:39:19+00:00| seen| https://t.me/cibsecurity/70988...

CVE-2023-36618

creationtimestamp| type| source ---|---|--- 2023-09-21 16:20:04+00:00| seen| https://t.me/truesecator/4874 2023-10-05 00:13:33+00:00| seen| https://t.me/cibsecurity/71638...

PT-2023-28893

Name of the Vulnerable Software and Affected Versions SoftwareX versions prior to 7.10 Description The issue arises from the implementation of deriveVaultKey, which generates a vault key with the last 16 bytes predetermined to be "arfoobarfoobarfo". This occurs because deriveVaultKey calls...

CVE-2023-25526

creationtimestamp| type| source ---|---|--- 2023-09-20 16:25:39+00:00| seen| https://t.me/cibsecurity/70762...

CVE-2023-42359

creationtimestamp| type| source ---|---|--- 2023-09-18 16:28:22+00:00| seen| https://t.me/cibsecurity/70648...

ccg.pt Cross Site Scripting vulnerability OBB-3688233

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

autoobd.de Cross Site Scripting vulnerability OBB-3686263

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-36160

creationtimestamp| type| source ---|---|--- 2023-09-16 07:26:02+00:00| seen| https://t.me/cibsecurity/70626...

asanianime.com.xx3.kz Cross Site Scripting vulnerability OBB-3686036

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

zeic.com.cn Cross Site Scripting vulnerability OBB-3685536

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bewe-bestattungsbedarf.de Cross Site Scripting vulnerability OBB-3685514

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

wzzhengda.com Cross Site Scripting vulnerability OBB-3685465

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...