aventurasoft.com Cross Site Scripting vulnerability OBB-3752937

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-35084

creationtimestamp| type| source ---|---|--- 2023-10-18 07:33:28+00:00| seen| https://t.me/cibsecurity/72481...

ALPINE-CVE-2023-38552

When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all user...

CVE-2023-38552 vulnerabilities

Vulnerabilities for packages: nodejs...

AZL-31614 CVE-2023-38552 affecting package nodejs18 for versions less than 18.18.2-2

When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all user...

CVE-2023-38552 vulnerabilities

Vulnerabilities for packages: nodejs...

Design/Logic Flaw

When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all user...

CVE-2023-38552

When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all user...

CVE-2023-22071

creationtimestamp| type| source ---|---|--- 2023-10-18 02:44:56+00:00| seen| https://t.me/cibsecurity/72475...

CVE-2023-22089

creationtimestamp| type| source ---|---|--- 2023-10-18 02:44:55+00:00| seen| https://t.me/cibsecurity/72474...

CVE-2023-45811

creationtimestamp| type| source ---|---|--- 2023-10-18 02:44:54+00:00| seen| https://t.me/cibsecurity/72473 2023-12-26 12:33:59+00:00| published-proof-of-concept| https://t.me/truesecator/5246...

CVE-2023-41712

creationtimestamp| type| source ---|---|--- 2023-10-18 02:44:47+00:00| seen| https://t.me/cibsecurity/72469...

CVE-2023-22090

creationtimestamp| type| source ---|---|--- 2023-10-18 02:44:44+00:00| seen| https://t.me/cibsecurity/72466...

CVE-2023-22110

creationtimestamp| type| source ---|---|--- 2023-10-18 02:44:43+00:00| seen| https://t.me/cibsecurity/72465 2023-11-15 17:01:59+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5993...

CVE-2023-22082

creationtimestamp| type| source ---|---|--- 2023-10-18 02:44:42+00:00| seen| https://t.me/cibsecurity/72464...

CVE-2023-22088

creationtimestamp| type| source ---|---|--- 2023-10-18 02:44:36+00:00| seen| https://t.me/cibsecurity/72459...

WordPress Super Testimonial Pro Plugin <= 2.9 is vulnerable to Cross Site Scripting (XSS)

Software Super Testimonial Pro Type Plugin Vulnerable versions = 2.9 Fixed in 3.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5613 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4c345a4e70e4 Credits Lana Codes Required...

WordPress Archivist – Custom Archive Templates Plugin <= 1.7.7 is vulnerable to Cross Site Scripting (XSS)

Software Archivist – Custom Archive Templates Type Plugin Vulnerable versions = 1.7.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46194 Patch priority Medium CVSS severity Medium 5.8 Developer Claim ownership PSID 9eaf34517c88 Credit...

RHEL 9 : nodejs:18 (RHSA-2023:5849)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5849 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...

WordPress MpOperationLogs Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software MpOperationLogs Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5538 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 58b2eea0d790 Credits juweihuitao Required...