4191 matches found
growingformarket.com Cross Site Scripting vulnerability OBB-3921680
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress Import WP Plugin < 2.13.1 is vulnerable to Server Side Request Forgery (SSRF)
Software Import WP Type Plugin Vulnerable versions 2.13.1 Fixed in 2.13.1 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2023-7253 Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PSID ef4fb29b4b88 Credits Mr Empy Required privilege...
CVE-2024-20356
creationtimestamp| type| source ---|---|--- 2024-04-18 14:55:08+00:00| published-proof-of-concept| https://t.me/RedTeamFeed/273 2024-04-20 02:10:24+00:00| published-proof-of-concept| https://t.me/CNArsenal/2349 2024-04-20 12:36:36+00:00| published-proof-of-concept| https://t.me/cKure/12767...
Amazon Linux 2 : tigervnc (ALAS-2024-2510)
The version of tigervnc installed on the remote host is prior to 1.8.0-24. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2510 advisory. A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents function. This issue...
CVE-2024-24996
creationtimestamp| type| source ---|---|--- 2024-04-17 19:35:05+00:00| seen| https://t.me/truesecator/5650 2024-04-18 15:00:35+00:00| seen| https://t.me/RussianOSINT/4022 2025-03-24 21:23:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8543...
WordPress Geo Controller < 8.6.5 - PHP Object Injection
Description The plugin unserializes user input via some of its AJAX actions and REST API routes, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog. PoC...
Adobe Bridge 13.x < 13.0.7 / 14.x < 14.0.3 Vulnerability (APSB24-24)
The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 13.0.7 or 14.0.3. It is, therefore, affected by a vulnerability as referenced in the apsb24-24 advisory. - Bridge versions 13.0.6, 14.0.2 and earlier are affected by an out-of-bounds read vulnerability that cou...
CVE-2024-28744
The password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier, and ACERA 9010-24 firmware v02.04 and earlier. An unauthenticated attacker may log in to the product with no password, and obtain and/or alter information such as network configuration and user...
PT-2024-22553 · Acera · Acera 9010-24 +1
Name of the Vulnerable Software and Affected Versions: ACERA 9010-08 firmware versions v02.04 and earlier ACERA 9010-24 firmware versions v02.04 and earlier Description: The password is empty in the initial configuration, allowing an unauthenticated attacker to log in with no password and obtain ...
IBM WebSphere Application Server Liberty 资源管理错误漏洞
IBM WebSphere Application Server Liberty is a Java application server from International Business Machines IBM built on top of the Open Liberty project. A resource management error vulnerability exists in IBM WebSphere Application Server Liberty versions 17.0.0.3 through 24.0.0.3, which stems fro...
beautyandthebeastpublishing.net Cross Site Scripting vulnerability OBB-3884784
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
scifest.nationalartsfestival.co.za Cross Site Scripting vulnerability OBB-3884750
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-2891
creationtimestamp| type| source ---|---|--- 2024-03-24 17:54:38+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10206...
CVE-2024-23727
creationtimestamp| type| source ---|---|--- 2024-03-24 16:27:48+00:00| seen| https://t.me/GithubRedTeam/6845...
homehelpnh.org Cross Site Scripting vulnerability OBB-3884698
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
btisinc.com Cross Site Scripting vulnerability OBB-3884671
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
eduplus.hk Cross Site Scripting vulnerability OBB-3884666
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2019-20208
creationtimestamp| type| source ---|---|--- 2024-03-19 09:36:50+00:00| seen| https://t.me/ctinow/211291 2025-03-06 02:17:24+00:00| seen| Telegram/9BhRqFViKddP2mM7WmytKNmAzgFzb6hGoDbAa07yV2hwmM...
CVE-2019-20140
creationtimestamp| type| source ---|---|--- 2024-03-18 15:46:27+00:00| seen| https://t.me/ctinow/210664 2026-04-24 14:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mkap5vw4tm2w...