CVE-2023-41843

creationtimestamp| type| source ---|---|--- 2023-10-13 18:29:11+00:00| seen| https://t.me/cibsecurity/72256...

Node.js Data Forgery Issue Vulnerability

Node.js is an open source, cross-platform JavaScript runtime environment. A data forgery issue vulnerability exists in Node.js versions 18.x , 20.x. The vulnerability stems from the fact that when the Node.js policy function checks the integrity of a resource against a trusted list, an applicatio...

CVE-2023-44186

creationtimestamp| type| source ---|---|--- 2023-10-12 00:18:02+00:00| seen| https://t.me/cibsecurity/72158...

AZL-34686 CVE-2023-44487 affecting package flannel for versions less than 0.14.0-18

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

CVE-2022-35950

creationtimestamp| type| source ---|---|--- 2023-10-09 18:15:59+00:00| seen| https://t.me/cibsecurity/71845...

CVE-2023-5374

creationtimestamp| type| source ---|---|--- 2023-10-04 18:12:24+00:00| seen| https://t.me/cibsecurity/71589...

CVE-2023-40558

creationtimestamp| type| source ---|---|--- 2023-10-03 18:46:16+00:00| seen| https://t.me/cibsecurity/71507...

Internet Bug Bounty: Permissions policies can be bypassed via Module._load and require.extensions (High) (CVE-2023-30587)

A vulnerability in the experimental permissions policy mechanism in Node.js was reported. The use of Module.load could bypass the policy and require unauthorized modules. This affected all active release lines. The vulnerability was reported by a researcher and fixed by the Node.js security team...

CVE-2023-43871

creationtimestamp| type| source ---|---|--- 2023-09-28 18:36:54+00:00| seen| https://t.me/cibsecurity/71199...

CVE-2023-40406

creationtimestamp| type| source ---|---|--- 2023-09-27 18:45:51+00:00| seen| https://t.me/cibsecurity/71092...

AlmaLinux 8 : nodejs:18 (ALSA-2023:5362)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:5362 advisory. nodejs: Permissions policies can be bypassed via Module.load CVE-2023-32002 nodejs-semver: Regular expression denial of service CVE-2022-25883 nodejs:...

RHEL 8 : nodejs:18 (RHSA-2023:5362)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5362 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...

CVE-2023-5062

creationtimestamp| type| source ---|---|--- 2023-09-20 07:30:18+00:00| seen| https://t.me/cibsecurity/70772...

CVE-2023-41030

creationtimestamp| type| source ---|---|--- 2023-09-18 22:28:35+00:00| seen| https://t.me/cibsecurity/70664...

CVE-2023-42320

creationtimestamp| type| source ---|---|--- 2023-09-18 20:28:36+00:00| seen| https://t.me/cibsecurity/70659...

CVE-2023-42328

creationtimestamp| type| source ---|---|--- 2023-09-18 20:28:35+00:00| seen| https://t.me/cibsecurity/70658...

CVE-2023-42371

creationtimestamp| type| source ---|---|--- 2023-09-18 18:28:28+00:00| seen| https://t.me/cibsecurity/70652...

CVE-2023-42387

creationtimestamp| type| source ---|---|--- 2023-09-18 18:28:27+00:00| seen| https://t.me/cibsecurity/70651...

CVE-2023-42359

creationtimestamp| type| source ---|---|--- 2023-09-18 16:28:22+00:00| seen| https://t.me/cibsecurity/70648...

flyandfilm.pl Cross Site Scripting vulnerability OBB-3696095

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...