passport.wenxuecity.com Cross Site Scripting vulnerability OBB-2855652

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-2909

creationtimestamp| type| source ---|---|--- 2022-08-20 12:18:16+00:00| seen| https://t.me/cibsecurity/48466...

gmdoa.org Cross Site Scripting vulnerability OBB-2855397

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tpcpage.com Cross Site Scripting vulnerability OBB-2855378

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-36030

creationtimestamp| type| source ---|---|--- 2022-08-20 07:18:03+00:00| seen| https://t.me/cibsecurity/48465...

CVE-2022-36008

creationtimestamp| type| source ---|---|--- 2022-08-20 00:17:49+00:00| seen| https://t.me/cibsecurity/48464...

CVE-2022-23460

creationtimestamp| type| source ---|---|--- 2022-08-20 00:17:45+00:00| seen| https://t.me/cibsecurity/48459...

[H1] Protocol is unusable with some ERC20 tokens

Lines of code Vulnerability details Impact ​ Protocol unusable for USDT and other bad tokens Proof of Concept ​ Some ERC20 tokens do not implement correctly EIP-20 standard. They just do not return a boolean in transfer/transferFrom functions and just return void. Asking them for a boolean will...

CVE-2022-33927

creationtimestamp| type| source ---|---|--- 2022-08-10 20:26:19+00:00| seen| https://t.me/cibsecurity/47876...

CVE-2022-33926

creationtimestamp| type| source ---|---|--- 2022-08-10 20:26:02+00:00| seen| https://t.me/cibsecurity/47863...

Adobe Reader < 17.012.30262 / 20.005.30381 / 22.002.20191 Multiple Vulnerabilities (APSB22-39)

The version of Adobe Reader installed on the remote Windows host is a version prior to 17.012.30262, 20.005.30381, or 22.002.20191. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 22.001.20169 and earlier, 20.005.30362 and earlier and 17.012.30249 and earli...

CVE-2022-1158

creationtimestamp| type| source ---|---|--- 2022-08-05 20:20:57+00:00| seen| https://t.me/cibsecurity/47634...

CVE-2022-34993

creationtimestamp| type| source ---|---|--- 2022-08-04 22:20:00+00:00| seen| https://t.me/cibsecurity/47579...

CVE-2022-34871

creationtimestamp| type| source ---|---|--- 2022-08-03 20:18:49+00:00| seen| https://t.me/cibsecurity/47507...

CVE-2022-20345

creationtimestamp| type| source ---|---|--- 2022-08-03 13:20:04+00:00| seen| https://t.me/truesecator/3248 2022-08-04 07:00:05+00:00| seen| https://t.me/TopCyberTechNews/83 2022-08-11 00:26:13+00:00| seen| https://t.me/cibsecurity/47890 2022-08-20 17:00:04+00:00| seen| https://t.me/poxek/2320...

Backdoor.Win32.Destrukor.20 MVID-2022-0627 Remote Command Execution

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/c790749f851d48e66e7d59cc2e451956B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Destrukor.20 Vulnerability: Unauthenticated Remote Command Execution...

CVE-2022-35672

creationtimestamp| type| source ---|---|--- 2022-07-27 20:36:28+00:00| seen| https://t.me/cibsecurity/47119...

DD-WRT httpd unescape memory corruption vulnerability

Summary A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability. Tested Versions DD-WRT Revision 322...

FreshTomato httpd unescape memory corruption vulnerability

Summary A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability. Tested Versions FreshTomato 2022.1 Product URLs...

CVE-2022-34906

creationtimestamp| type| source ---|---|--- 2022-07-26 00:33:22+00:00| seen| https://t.me/cibsecurity/46964 2022-07-26 14:20:07+00:00| seen| https://t.me/truesecator/3217 2022-07-28 12:16:44+00:00| seen| https://t.me/CyberSecurityTechnologies/6480 2022-10-11 12:08:37+00:00| seen|...