CVE-2023-25601

creationtimestamp| type| source ---|---|--- 2023-04-20 20:30:45+00:00| seen| https://t.me/cibsecurity/62533...

CVE-2023-27652

creationtimestamp| type| source ---|---|--- 2023-04-20 18:30:57+00:00| seen| https://t.me/cibsecurity/62529...

CVE-2022-29605

creationtimestamp| type| source ---|---|--- 2023-04-20 16:30:52+00:00| seen| https://t.me/cibsecurity/62522...

CVE-2022-29608

creationtimestamp| type| source ---|---|--- 2023-04-20 16:30:50+00:00| seen| https://t.me/cibsecurity/62520...

CVE-2022-29607

creationtimestamp| type| source ---|---|--- 2023-04-20 16:30:48+00:00| seen| https://t.me/cibsecurity/62518...

CVE-2022-29609

creationtimestamp| type| source ---|---|--- 2023-04-20 16:30:46+00:00| seen| https://t.me/cibsecurity/62516...

CVE-2022-24109

creationtimestamp| type| source ---|---|--- 2023-04-20 16:30:42+00:00| seen| https://t.me/cibsecurity/62513...

CVE-2023-1767

creationtimestamp| type| source ---|---|--- 2023-04-20 14:30:42+00:00| seen| https://t.me/cibsecurity/62510 2026-07-29 12:00:38+00:00| seen| https://t.me/CVEhub/11077 2026-07-30 00:01:05+00:00| seen| https://t.me/CVEhub/11077 2026-07-31 05:00:04+00:00| published-proof-of-concept|...

4337-snap (>=0.1.0, <=0.1.1), @0xabcdefg/smart-order-router (>=1.0.0, <=1.0.5) +1448 more potentially affected by CVE-2023-30542 via @openzeppelin/contracts (>=4.3.0, <=4.8.2)

@openzeppelin/contracts NPM version =4.3.0, =0.1.0, =1.0.0, =1.0.0, =3.24.7, =1.7.2, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.123.2 and more Source cves: CVE-2023-30542 Source advisory: OSV:GHSA-93HQ-5WGC-JC82...

cashcarpets.co.uk Cross Site Scripting vulnerability OBB-3269203

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kwikcleanse.co.uk Cross Site Scripting vulnerability OBB-3269201

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2019-9220

creationtimestamp| type| source ---|---|--- 2023-04-20 07:59:49+00:00| published-proof-of-concept| https://t.me/criticalbug/555...

CVE-2023-23451

creationtimestamp| type| source ---|---|--- 2023-04-20 02:30:26+00:00| seen| https://t.me/cibsecurity/62494...

WordPress ChatBot Plugin <= 4.4.6 is vulnerable to PHP Object Injection

Software ChatBot Type Plugin Vulnerable versions = 4.4.6 Fixed in 4.4.7 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2023-1650 Patch priority High CVSS severity High 5.4 Developer Claim ownership PSID 84bd0e4874e7 Credits Erwan LR Required privilege Unauthenticated...

WordPress Blog Navigator Chatbot by Xatkit Plugin <= 4.4.9 is vulnerable to Cross Site Scripting (XSS)

Software Blog Navigator Chatbot by Xatkit Type Plugin Vulnerable versions = 4.4.9 Fixed in 4.5.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1649 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 73a888678fc8 Credits Erwan L...

CVE-2023-30611

creationtimestamp| type| source ---|---|--- 2023-04-19 22:30:20+00:00| seen| https://t.me/cibsecurity/62476...

OpenJDK: improper connection handling during TLS handshake (8294474)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit...

CVE-2023-29410

A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same privilege as the application on the server when a malicious payload is provided over HTTP for the server to execute...

CVE-2023-29410

A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same privilege as the application on the server when a malicious payload is provided over HTTP for the server to execute...

CVE-2023-29410

CVE-2023-29410 involves Schneider Electric Conext Gateway and an input validation error (CWE-20). The connected sources identify vulnerable versions as Conext Gateway v1.16 Build 004 and earlier, with an authenticated attacker able to escalate to the same privileges as the application on the serv...