Fortinet Fortigate Open redirect in sslvpnd (FG-IR-22-479)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-479 advisory. - A url redirection to untrusted site 'open redirect' in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0...

Fortinet Fortigate xss (FG-IR-22-224)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-224 advisory. - An improper neutralization of input during web page generation CWE-79 vulnerability in FortiOS versions 7.0.0 to 7.0.7 and...

CVE-2023-30530

creationtimestamp| type| source ---|---|--- 2023-04-12 22:24:10+00:00| seen| https://t.me/cibsecurity/61984...

CVE-2023-20684

creationtimestamp| type| source ---|---|--- 2023-04-06 22:27:23+00:00| seen| https://t.me/cibsecurity/61589...

CVE-2023-20660

creationtimestamp| type| source ---|---|--- 2023-04-06 22:27:16+00:00| seen| https://t.me/cibsecurity/61582...

CVE-2023-0208

creationtimestamp| type| source ---|---|--- 2023-04-01 07:22:38+00:00| seen| https://t.me/cibsecurity/61289...

CVE-2022-43618

creationtimestamp| type| source ---|---|--- 2023-03-29 22:32:03+00:00| seen| https://t.me/cibsecurity/61126...

CVE-2022-43615

creationtimestamp| type| source ---|---|--- 2023-03-29 22:28:56+00:00| seen| https://t.me/cibsecurity/61106...

CVE-2022-28302

creationtimestamp| type| source ---|---|--- 2023-03-29 22:25:51+00:00| seen| Telegram/eyodvYnH2yinXcQPZZBWW6Id6ecEJvimJ2cZSspgWtlRhQ...

CVE-2022-37367

creationtimestamp| type| source ---|---|--- 2023-03-29 22:25:46+00:00| seen| https://t.me/cibsecurity/61083...

CVE-2022-37355

creationtimestamp| type| source ---|---|--- 2023-03-29 22:21:53+00:00| seen| https://t.me/cibsecurity/61065...

CVE-2022-28685

creationtimestamp| type| source ---|---|--- 2023-03-29 22:16:01+00:00| seen| https://t.me/cibsecurity/61055...

YouPHPTube <= 7.8 - Multiple Vulnerabilities

Exploit Title: YouPHPTube getLanguage; if !empty$GET'lang' $GET'lang' = striptags$GET'lang'; $SESSION'language' = $GET'lang'; @includeonce "$global'systemRootPath'locale/$SESSION'language'.php"; The parameter "lang" can be modified and load a php file in the server. In Document root: /phpinfo.php...

WPN-XM Serverstack for Windows 0.8.6 - Multiple Vulnerabilities

Exploit Title: WPN-XM Serverstack for Windows 0.8.6 - Multiple Vulnerabilities Discovery by: Rafael Pedrero Discovery Date: 2022-02-13 Vendor Homepage: http://wpn-xm.org/ Software Link : https://github.com/WPN-XM/WPN-XM/ Tested Version: 0.8.6 Tested on: Windows 10 using XAMPP Vulnerability Type:...

WPN-XM Serverstack For Windows 0.8.6 XSS / LFI / Traversal

Exploit Title: WPN-XM Serverstack for Windows 0.8.6 - Multiple Vulnerabilities Discovery by: Rafael Pedrero Discovery Date: 2022-02-13 Vendor Homepage: http://wpn-xm.org/ Software Link : https://github.com/WPN-XM/WPN-XM/ Tested Version: 0.8.6 Tested on: Windows 10 using XAMPP Vulnerability Type:...

WPN-XM Serverstack for Windows 0.8.6 - Multiple Vulnerabilities

Exploit Title: WPN-XM Serverstack for Windows 0.8.6 - Multiple Vulnerabilities Discovery by: Rafael Pedrero Vendor Homepage: http://wpn-xm.org/ Software Link : https://github.com/WPN-XM/WPN-XM/ Tested Version: 0.8.6 Tested on: Windows 10 using XAMPP Vulnerability Type: Local File Inclusion LFI &...

CVE-2023-28663

creationtimestamp| type| source ---|---|--- 2023-03-22 23:36:23+00:00| seen| https://t.me/cibsecurity/60533...

CVE-2023-28119

creationtimestamp| type| source ---|---|--- 2023-03-22 23:36:21+00:00| seen| https://t.me/cibsecurity/60531...

CVE-2023-28667

creationtimestamp| type| source ---|---|--- 2023-03-22 23:36:16+00:00| seen| https://t.me/cibsecurity/60529...

newbest-ricambi.com Cross Site Scripting vulnerability OBB-3230143

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...