Adobe InDesign < 18.5.1 / 18.0 < 19.0.0 Multiple Vulnerabilities (APSB23-55) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 18.5.1, 19.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-55 advisory. - Adobe InDesign versions ID18.5 and earlier and ID17.4.2 and earlier are affected by an out-of-bounds read...

CVE-2022-45805

creationtimestamp| type| source ---|---|--- 2023-11-07 20:17:47+00:00| seen| https://t.me/cibsecurity/73525...

Fedora 39 : nodejs20 (2023-7b52921cae)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-7b52921cae advisory. 2023-10-13, Version 20.8.1 Current, @RafaelGSS This is a security release. Notable Changes The following CVEs are fixed in this release:...

CVE-2023-5964

creationtimestamp| type| source ---|---|--- 2023-11-06 16:25:51+00:00| seen| https://t.me/cibsecurity/73616 2025-05-20 08:40:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16961...

CVE-2023-43797

creationtimestamp| type| source ---|---|--- 2023-10-31 01:20:28+00:00| seen| https://t.me/cibsecurity/73193...

CVE-2023-21394

creationtimestamp| type| source ---|---|--- 2023-10-30 21:20:08+00:00| seen| https://t.me/cibsecurity/73185...

Fedora 37 : nodejs20 (2023-f66fc0f62a)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-f66fc0f62a advisory. 2023-10-13, Version 20.8.1 Current, @RafaelGSS This is a security release. Notable Changes The following CVEs are fixed in this release:...

Internet Bug Bounty: Permission model improperly protects against path traversal in Node.js 20

A path traversal vulnerability was introduced in Node.js 20 due to insufficient patching of CVE-2023-30584. The vulnerability arises because the permission model implementation does not protect itself against the application overwriting built-in utility functions like path.resolve with user-defin...

K000137330: Node.JS vulnerabilities CVE-2023-38552, CVE-2023-39331, CVE-2023-39332, and CVE-2023-3933

Security Advisory Description CVE-2023-38552 When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check...

CVE-2023-46149

creationtimestamp| type| source ---|---|--- 2023-10-22 02:44:12+00:00| published-proof-of-concept| https://t.me/codeb0ss/1267 2023-10-24 19:46:01+00:00| published-proof-of-concept| Telegram/WVZ9BmLdITCEGHwv5Sa3VoS7DPHcwW27tO-sX6j0-l8rvg 2023-12-20 20:29:22+00:00| seen| https://t.me/ctinow/157286...

PT-2023-8990 · Node.Js +5 · Node.Js +5

Name of the Vulnerable Software and Affected Versions: Node.js versions 20 through 21 Description: The issue is related to the permission model in Node.js, which is an experimental feature. It protects itself against path traversal attacks by calling path.resolve on any paths given by the user. I...

israeliguide.com Cross Site Scripting vulnerability OBB-3757355

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-5690

creationtimestamp| type| source ---|---|--- 2023-10-20 20:35:26+00:00| seen| https://t.me/cibsecurity/72705...

CVE-2023-23373

creationtimestamp| type| source ---|---|--- 2023-10-20 20:35:24+00:00| seen| https://t.me/cibsecurity/72703...

CVE-2023-3965

creationtimestamp| type| source ---|---|--- 2023-10-20 20:35:23+00:00| seen| https://t.me/cibsecurity/72702...

hotelrestaurantlareserve.com Cross Site Scripting vulnerability OBB-3756955

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hotelalleguglie.com Cross Site Scripting vulnerability OBB-3756888

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-4418

creationtimestamp| type| source ---|---|--- 2023-10-20 17:22:21+00:00| seen| https://t.me/cibsecurity/72663...

CVE-2022-42150

creationtimestamp| type| source ---|---|--- 2023-10-20 16:30:01+00:00| seen| https://t.me/cibsecurity/72628...

gastrocknung.de Cross Site Scripting vulnerability OBB-3756565

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...