drouot-morand.com Cross Site Scripting vulnerability OBB-3455803

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

muva-online.com Cross Site Scripting vulnerability OBB-3455798

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kpbsc.edu.bd Cross Site Scripting vulnerability OBB-3455793

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-0972

creationtimestamp| type| source ---|---|--- 2023-06-22 00:26:28+00:00| seen| https://t.me/cibsecurity/65397...

WordPress wpForo Forum Plugin <= 2.1.7 is vulnerable to Local File Inclusion

Software wpForo Forum Type Plugin Vulnerable versions = 2.1.7 Fixed in 2.1.8 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2023-2249 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 1bcd08b1a273 Credits Hamed Required privilege Subscriber Publishe...

WordPress KiviCare Plugin < 3.2.1 is vulnerable to Sensitive Data Exposure

Software KiviCare Type Plugin Vulnerable versions 3.2.1 Fixed in 3.2.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-2623 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID a87f14ff0aad Credits Erwan LR WPScan Required...

WordPress Accordion & FAQ – Helpie WordPress Accordion FAQ Plugin Plugin < 1.9.9 is vulnerable to Cross Site Scripting (XSS)

Software Accordion & FAQ – Helpie WordPress Accordion FAQ Plugin Type Plugin Vulnerable versions 1.9.9 Fixed in 1.9.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1891 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID...

WordPress Contact Form Email Plugin < 1.3.38 is vulnerable to Cross Site Scripting (XSS)

Software Contact Form Email Type Plugin Vulnerable versions 1.3.38 Fixed in 1.3.38 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2718 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 3c1617231fe6 Credits Andreas Damen...

WordPress Go Pricing Plugin <= 3.3.19 is vulnerable to Broken Access Control

Software Go Pricing Type Plugin Vulnerable versions = 3.3.19 Fixed in 3.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-2494 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 71975662f90e Credits Lana Codes Required privilege...

WordPress Quick Post Duplicator Plugin <= 2.0 is vulnerable to SQL Injection

Software Quick Post Duplicator Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-2229 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 82cd33300670 Credits Marco Wotschka Required privilege Contributor...

CVE-2023-34122

creationtimestamp| type| source ---|---|--- 2023-06-13 22:20:12+00:00| seen| https://t.me/cibsecurity/65169...

CVE-2023-34334

creationtimestamp| type| source ---|---|--- 2023-06-12 22:19:30+00:00| seen| https://t.me/cibsecurity/65143...

Fortinet Fortigate DoS in firmware upgrade function (FG-IR-22-375)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-375 advisory. - A loop with unreachable exit condition 'infinite loop' in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS version 7.0...

Fortinet Fortigate Out-of-bound write in CLI (FG-IR-22-494)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-494 advisory. - A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS versio...

Fortinet FortiWeb DoS in firmware upgrade function (FG-IR-22-375)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-375 advisory. - A loop with unreachable exit condition 'infinite loop' in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS version 7.0....

CVE-2023-34234

creationtimestamp| type| source ---|---|--- 2023-06-07 22:35:57+00:00| seen| https://t.me/cibsecurity/65047...

CVE-2023-33967

creationtimestamp| type| source ---|---|--- 2023-05-31 22:24:39+00:00| seen| https://t.me/cibsecurity/64833...

CVE-2023-2838

creationtimestamp| type| source ---|---|--- 2023-05-22 22:24:55+00:00| seen| https://t.me/cibsecurity/64565...

CVE-2023-2837

creationtimestamp| type| source ---|---|--- 2023-05-22 22:24:54+00:00| seen| https://t.me/cibsecurity/64564...

CVE-2023-28467

creationtimestamp| type| source ---|---|--- 2023-05-22 22:24:53+00:00| seen| https://t.me/cibsecurity/64563 2023-07-23 19:34:47+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8720 2023-07-24 13:05:13+00:00| published-proof-of-concept| https://t.me/LearnExploit/5341...