6169 matches found
weatheronline.in Cross Site Scripting vulnerability OBB-3225004
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-1449
creationtimestamp| type| source ---|---|--- 2023-03-17 11:36:38+00:00| seen| https://t.me/cibsecurity/60235...
CVE-2023-1446
creationtimestamp| type| source ---|---|--- 2023-03-17 11:36:37+00:00| seen| https://t.me/cibsecurity/60234...
CVE-2023-1444
creationtimestamp| type| source ---|---|--- 2023-03-17 11:36:35+00:00| seen| https://t.me/cibsecurity/60232 2025-02-26 15:26:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5514...
fahrrad-fit.de Cross Site Scripting vulnerability OBB-3224788
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
landakademie.de Cross Site Scripting vulnerability OBB-3224773
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress WP Job Portal Plugin <= 2.0.5 is vulnerable to Cross Site Scripting (XSS)
Software WP Job Portal Type Plugin Vulnerable versions = 2.0.5 Fixed in 2.0.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28534 Patch priority Medium CVSS severity Medium 6.5 Developer Ahmad PSID e68a92571619 Credits Fariq Fadillah Gusti Insani...
CVE-2020-22647
creationtimestamp| type| source ---|---|--- 2023-03-16 17:30:54+00:00| seen| https://t.me/cibsecurity/60148...
CVE-2023-24762
creationtimestamp| type| source ---|---|--- 2023-03-13 17:23:27+00:00| seen| https://t.me/cibsecurity/59900...
CVE-2023-0622
creationtimestamp| type| source ---|---|--- 2023-03-10 00:20:49+00:00| seen| https://t.me/cibsecurity/59766 2025-01-17 22:57:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2240...
CVE-2023-24282
creationtimestamp| type| source ---|---|--- 2023-03-09 00:23:23+00:00| seen| https://t.me/cibsecurity/59708 2025-03-06 02:17:22+00:00| seen| Telegram/e-Thzq9EgM16PWg62aLT8Zhm2wySFafsQRpx3WPKObGkJu...
Upgraded Q -> 2 from #17 [1678363178694]
Judge has assessed an item in Issue 17 as 2 risk. The relevant finding follows: 5. Duplicated swingTrader addresses can be added which make sellMalt/buyMalt working incorrectly Details In function addSwingTrader, there is no check to ensure swingTrader address is not existed. So admin can make a...
Solaris 10 (x86) : 151913-21
SunOS 5.10x86: OpenSSL 1.0.2 patch. Date this patch was last updated by Sun : Oct/17/22 %NASLMINLEVEL 80900 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid172386; scriptversion"1.0...
CVE-2023-1184
creationtimestamp| type| source ---|---|--- 2023-03-06 12:17:36+00:00| seen| https://t.me/cibsecurity/59459...
L-Soft LISTSERV 跨站脚本漏洞
L-Soft LISTSERV is a suite of e-mail list management software from L-Soft. A security vulnerability exists in L-Soft LISTSERV versions 16.5 through prior to 17. The vulnerability is exploited by attackers to conduct cross-site scripting attacks via specially crafted URLs...
CVE-2022-40633
creationtimestamp| type| source ---|---|--- 2023-03-03 02:49:13+00:00| seen| https://t.me/cibsecurity/59352 2025-01-17 22:57:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2239...
Malicious Package
Overview react-test-renderer-17 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
CVE-2021-32163
creationtimestamp| type| source ---|---|--- 2023-02-17 20:19:23+00:00| seen| https://t.me/cibsecurity/58466...