cloudbooksapp.com Cross Site Scripting vulnerability OBB-3936682

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-31204

creationtimestamp| type| source ---|---|--- 2024-06-19 11:50:05+00:00| seen| https://t.me/truesecator/5872 2024-06-23 23:31:11+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10727 2026-07-26 02:00:22+00:00| seen| https://t.me/cyberwarehouse/455 2026-07-27 00:00:21+00:00...

aytoquintanadelcastillo.es Cross Site Scripting vulnerability OBB-3936585

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

epseggpowders.com Cross Site Scripting vulnerability OBB-3936314

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-26968 · Vantiva · Mediaaccess Dga2232

Name of the Vulnerable Software and Affected Versions: Vantiva - MediaAccess DGA2232 version 19.4 Description: The issue is related to improper neutralization of input during web page generation, which can lead to cross-site scripting. Recommendations: For version 19.4, update to a newer version...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: Im appearing on a panel on Society and Democracy at ACM Collective Intelligence in Boston, Massachusetts. The conference runs from June 26 through 29, 2024, and my panel is at 9:00 AM on Friday, June 28. Im speaking on "Reimagining...

U.S. Dismantles World's Largest 911 S5 Botnet with 19 Million Infected Devices

The U.S. Department of Justice DoJ on Wednesday said it dismantled what it described as "likely the world's largest botnet ever," which consisted of an army of 19 million infected devices that was leased to other threat actors to commit a wide array of offenses. The botnet, which has a global...

FleetCart 4.1.1 Information Disclosure Vulnerability

Exploit Title: FleetCart 4.1.1 - WebPage Content Information Disclosure Exploit Author: CraCkEr Vendor: EnvaySoft Vendor Homepage: https://codecanyon.net/item/fleetcart-laravel-ecommerce-system/23014826 Software Demo Link: https://demo.fleetcart.envaysoft.com/en Tested on: Windows 11 Pro 22H2...

CVE-2024-4443

creationtimestamp| type| source ---|---|--- 2024-05-26 16:38:12+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7420 2026-01-19 21:03:03+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mcsk46lzal2j 2026-02-14 00:00:00+00:00| exploited| The Shadowserver...

python27:2.7 security update

babel 2.5.1-10 - Fix CVE-2021-20095 Resolves: rhbz1955615 2.5.1-9 - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz1695587 2.5.1-8 - Fix unversioned requires/buildrequires - Resolves: rhbz1628242 2.5.1-7 - Remove unversioned binaries - Resolves: rhbz1613343 2.5.1-6 - Make...

CVE-2024-35222

CVE-2024-35222 affects Tauri; remote origin iFrames can bypass origin checks to access IPC endpoints when not explicitly allowed (v1: before 1.6.7; v2: before 2.0.0-beta.19). Vulnerability enables an attacker-controlled iframe to invoke Tauri commands (e.g., delete project, transfer credits) via ...

FleetCart 4.1.1 Information Disclosure

Exploit Title: FleetCart 4.1.1 - WebPage Content Information Disclosure Exploit Author: CraCkEr Date: 13/05/2024 Vendor: EnvaySoft Vendor Homepage: https://codecanyon.net/item/fleetcart-laravel-ecommerce-system/23014826 Software Demo Link: https://demo.fleetcart.envaysoft.com/en Tested on: Window...

bingemans.ca Cross Site Scripting vulnerability OBB-3928704

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-52722

creationtimestamp| type| source ---|---|--- 2024-05-19 08:43:16+00:00| seen| https://t.me/arpsyndicate/4945...

CVE-2023-30553

creationtimestamp| type| source ---|---|--- 2024-05-15 14:56:19+00:00| seen| https://t.me/cibsecurity/62439...

CVE-2024-34429

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Orchestrated Corona Virus COVID-19 Banner & Live Data allows Stored XSS.This issue affects Corona Virus COVID-19 Banner & Live Data: from n/a through 1.8.0.2...

CVE-2024-34429 WordPress Simple Website Banner plugin <= 1.8.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Orchestrated Corona Virus COVID-19 Banner & Live Data allows Stored XSS.This issue affects Corona Virus COVID-19 Banner & Live Data: from n/a through 1.8.0.2...

Hackers Leak COVID-19 Data of 820K Dominicans, Including Vaccination Info

By Deeba Ahmed A massive data leak of 820,000 Dominicans' personal information including COVID vaccination status has been leaked online puting individuals at risk of identity theft, scams, and social engineering attacks. This is a post from HackRead.com Read the original post: Hackers Leak...

GLSA-202405-19 : xar: Unsafe Extraction

The remote host is affected by the vulnerability described in GLSA-202405-19 xar: Unsafe Extraction - This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files. CVE-2021-30833...

Teledyne FLIR M300 安全漏洞

The Teledyne FLIR M300 is a camera surveillance device from Teledyne FLIR, USA. A security vulnerability exists in Teledyne FLIR M300 version 2.00-19, which originates from a user account password that is locally encrypted and can be decrypted into plaintext using a utility program...