6008 matches found
GHSA-G56X-7J6W-G8R8
creationtimestamp| type| source ---|---|--- 2023-12-19 00:31:36+00:00| seen| https://t.me/ctinow/156209...
WordPress Menu Image, Icons made easy Plugin <= 3.10 is vulnerable to Cross Site Scripting (XSS)
Software Menu Image, Icons made easy Type Plugin Vulnerable versions = 3.10 Fixed in 3.11 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50826 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID e7ae4a05a16b Credits emad Required privilege...
Scammers Are Tricking Anti-Vaxxers Into Buying Bogus Medical Documents
On Telegram, scammers are impersonating doctors to sell fake Covid-19 vaccination certificates and other products, showing how criminals are taking advantage of conspiracy theories...
SUSE SLES15: kernel-livepatch-5_14_21-150400_24_92-default / etc (SUSE-SU-2023:4867-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4867-1 advisory. This update for the Linux Kernel 5.14.21-1504002492 fixes several issues. The following security issues were fixed: - CVE-2023-3777: Fixed a...
CVE-2022-21392
creationtimestamp| type| source ---|---|--- 2023-12-10 12:43:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9557 2023-12-11 06:53:58+00:00| published-proof-of-concept| https://t.me/darkcommunityofficial/189 2024-08-16 08:56:10+00:00| published-proof-of-concept|...
Path traversal
An uncontrolled search path element vulnerability has been found on 4D and 4D server Windows executables applications, affecting version 19 R8 100218. This vulnerability consists in a DLL hijacking by replacing x64 shfolder.dll in the installation path, causing an arbitrary code execution...
CVE-2019-19814
creationtimestamp| type| source ---|---|--- 2023-11-29 16:24:09+00:00| seen| https://t.me/arpsyndicate/768 2024-03-12 16:17:03+00:00| seen| https://t.me/ctinow/205792 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
CVE-2023-49030
SQL Injection vulnerability in32ns KLive v.2019-1-19 and before allows a remote attacker to obtain sensitive information via a crafted script to the web/user.php component...
CVE-2023-49028
Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the lock/lock.php file...
CVE-2023-49029
Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the nama parameter in the lock/lock.php file...
PT-2023-31032 · Klive · Klive
Name of the Vulnerable Software and Affected Versions: 32ns KLive versions 2019-1-19 and earlier Description: The issue allows a remote attacker to obtain sensitive information via a crafted script to the "web/user.php" component. This is achieved through a SQL Injection attack, which enables the...
sales30conf.com Cross Site Scripting vulnerability OBB-3786355
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
blackboxindustrialsurplus.machines4u.com.au Cross Site Scripting vulnerability OBB-3786349
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
iproperty.com.au Cross Site Scripting vulnerability OBB-3786282
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
yannlemouel.com Cross Site Scripting vulnerability OBB-3785689
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
wellensteyn.cz Cross Site Scripting vulnerability OBB-3784917
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2015-3145
creationtimestamp| type| source ---|---|--- 2023-11-19 16:12:40+00:00| seen| https://t.me/arpsyndicate/282...
CVE-2019-2933
creationtimestamp| type| source ---|---|--- 2023-11-19 15:56:45+00:00| seen| https://t.me/arpsyndicate/279 2024-01-15 08:11:10+00:00| seen| https://t.me/ctinow/168196...