adressen.naturkost.de Cross Site Scripting vulnerability OBB-3446037

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

normfest-shop.com Cross Site Scripting vulnerability OBB-3445189

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

dw.com Cross Site Scripting vulnerability OBB-3445171

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

solarmarkt.ch Cross Site Scripting vulnerability OBB-3445156

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

d113.web.wwi.dk Cross Site Scripting vulnerability OBB-3445084

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress WP Custom Cursors Plugin < 3.2 is vulnerable to SQL Injection

Software WP Custom Cursors Type Plugin Vulnerable versions 3.2 Fixed in 3.2 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-2221 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 57dc3e3d3d93 Credits Chien Vuong Required privilege Administrator Published...

CVE-2023-26297

creationtimestamp| type| source ---|---|--- 2023-06-13 02:19:31+00:00| seen| https://t.me/cibsecurity/65148...

CVE-2023-34334

creationtimestamp| type| source ---|---|--- 2023-06-12 22:19:30+00:00| seen| https://t.me/cibsecurity/65143...

CVE-2022-25834

In Percona XtraBackup PXB through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the local file system could trigger unexpected command shell execution of arbitrary commands...

PT-2023-12820 · Percona +1 · Percona Xtrabackup +1

Name of the Vulnerable Software and Affected Versions: Percona XtraBackup versions 2.2.0 through 2.2.24 Percona XtraBackup versions 3.0.0 through 8.0.27-19 Description: A crafted filename on the local file system could trigger unexpected command shell execution of arbitrary commands...

AZL-35363 CVE-2023-33460 affecting package yajl for versions less than 2.1.0-19

There's a memory leak in yajl 2.1.0 with use of yajltreeparse function. which will cause out-of-memory in server and cause crash...

KLA49379 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. Click-jacking vulnerability can be exploited to cause...

Mozilla Firefox ESR < 102.12

The version of Firefox ESR installed on the remote Windows host is prior to 102.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-19 advisory. - Mozilla developers and community members Gabriele Svelto, Andrew McCreight, the Mozilla Fuzzing Team, Sean Feng,...

Threat Roundup for May 19 to May 26

Today, Talos is publishing a glimpse into the most prevalent threats weve observed between May 19 and May 26. As with previous roundups, this post isnt meant to be an in-depth analysis. Instead, this post will summarize the threats weve observed by highlighting key behavioral characteristics,...

CVE-2023-1996

creationtimestamp| type| source ---|---|--- 2023-05-19 20:33:32+00:00| seen| https://t.me/cibsecurity/64468...

CVE-2023-2815

creationtimestamp| type| source ---|---|--- 2023-05-19 20:33:30+00:00| seen| https://t.me/cibsecurity/64466...

CVE-2023-22878

creationtimestamp| type| source ---|---|--- 2023-05-19 20:33:26+00:00| seen| https://t.me/cibsecurity/64462...

CVE-2023-31862

creationtimestamp| type| source ---|---|--- 2023-05-19 16:33:01+00:00| seen| https://t.me/cibsecurity/64461...

CVE-2023-33240

creationtimestamp| type| source ---|---|--- 2023-05-19 14:26:59+00:00| seen| https://t.me/cibsecurity/64451...

boucau.fr Cross Site Scripting vulnerability OBB-3355258

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...