CVE-2023-49293

creationtimestamp| type| source ---|---|--- 2023-12-04 22:07:59+00:00| published-proof-of-concept| https://github.com/vitejs/vite/security/advisories/GHSA-92r3-m2mg-pj97 2026-04-01 21:02:37+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mihlnmjq6h2f...

CVE-2023-42917 vulnerabilities

Vulnerabilities for packages: openjdk, openjdk-8-openj9...

Spring Tips: Spring Boot 3.2

Hi, Spring fans! In this installment of Spring Tips, I look at the new Spring Boot 3.2 release, due to drop today, the 23rd of November 2023! 23-11-23! We're diving into the cool new features of Spring Boot 3.2 and Java 21. We'll explore how virtual threads from Project Loom make your code run...

milanileiloes.com.br Improper Access Control vulnerability OBB-3789930

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

imaillist.com.br Improper Access Control vulnerability OBB-3789864

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-9XV9-423Q-X48X

creationtimestamp| type| source ---|---|--- 2023-11-21 20:15:06+00:00| seen| https://t.me/arpsyndicate/319...

enovatech.net Cross Site Scripting vulnerability OBB-3789727

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

burglauer.rhoen-saale.net Cross Site Scripting vulnerability OBB-3789698

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sega-saturn.net Cross Site Scripting vulnerability OBB-3789681

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-Q847-2Q57-WMR3

creationtimestamp| type| source ---|---|--- 2023-11-21 14:36:25+00:00| seen| https://t.me/arpsyndicate/315...

CVE-2023-4804

creationtimestamp| type| source ---|---|--- 2023-11-21 14:32:15+00:00| seen| https://t.me/truesecator/5109...

lloyddesign.ca Improper Access Control vulnerability OBB-3789359

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

joekerr.ca Improper Access Control vulnerability OBB-3789295

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-RCJV-MGP8-QVMR

creationtimestamp| type| source ---|---|--- 2023-11-21 02:43:21+00:00| seen| https://t.me/arpsyndicate/306...

grammar.com Cross Site Scripting vulnerability OBB-3789028

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cdt.ca Improper Access Control vulnerability OBB-3788922

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

This Week in Spring - Spring Boot 3.2 edition - November 21st, 2023

Hi, Spring fans! Welcome to another epic installment of This Week in Spring! As amazing as the week's already been, it's all leading up to this Thursday - Thanksgiving day! - when we release Spring Boot 3.2! and yes, I am very grateful. This release is stuffed to the gills with a ton of new...

WordPress Userpro Plugin <= 5.1.4 is vulnerable to Privilege Escalation

Software Userpro Type Plugin Vulnerable versions = 5.1.4 Fixed in 5.1.5 OWASP Top 10 A1: Broken Access Control Classification Privilege Escalation CVE CVE-2023-6009 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 7046ef9feaa8 Credits István Márton Required privilege...

Apache Derby: LDAP injection vulnerability in authenticator

A cleverly devised username might bypass LDAP authentication checks. In LDAP-authenticated Derby installations, this could let an attacker fill up the disk by creating junk Derby databases. In LDAP-authenticated Derby installations, this could also allow the attacker to execute malware which was...

CVE-2022-46337

A cleverly devised username might bypass LDAP authentication checks. In LDAP-authenticated Derby installations, this could let an attacker fill up the disk by creating junk Derby databases. In LDAP-authenticated Derby installations, this could also allow the attacker to execute malware which was...