coastal.gov.lk Cross Site Scripting vulnerability OBB-3949615

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-40767

creationtimestamp| type| source ---|---|--- 2024-07-24 08:17:20+00:00| seen| https://t.me/cvedetector/1540 2024-07-26 09:43:49+00:00| published-proof-of-concept| https://t.me/HackingInsights/7487...

i.mp.urityf.h.o.g.xx3.kz Cross Site Scripting vulnerability OBB-3949598

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-5861

creationtimestamp| type| source ---|---|--- 2024-07-24 07:27:09+00:00| seen| https://t.me/cvedetector/1538...

CVE-2024-6750

creationtimestamp| type| source ---|---|--- 2024-07-24 05:46:46+00:00| seen| https://t.me/cvedetector/1536...

CVE-2024-41656

creationtimestamp| type| source ---|---|--- 2024-07-24 00:45:43+00:00| seen| https://t.me/cvedetector/1529...

WordPress WP EasyPay Plugin <= 4.2.3 is vulnerable to Broken Access Control

Software WP EasyPay Type Plugin Vulnerable versions = 4.2.3 Fixed in 4.2.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-5861 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 60a90782a604 Credits Lucio Sá Required privilege...

WordPress Social Auto Poster Plugin <= 5.3.14 is vulnerable to Cross Site Scripting (XSS)

Software Social Auto Poster Type Plugin Vulnerable versions = 5.3.14 Fixed in 5.3.15 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6753 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID df6582eddf1d Credits István Márton...

CVE-2024-37016

Mengshen Wireless Door Alarm M70 2024-05-24 allows Authentication Bypass via a Capture-Replay approach...

CVE-2024-37016

The Mengshen Wireless Door Alarm M70 (version 2024-05-24 ) is vulnerable to an Authentication Bypass via a capture-replay approach. This vulnerability allows an attacker to gain unauthorized access by replaying captured communications. While the specific technical impact is categorized as high fo...

Mengshen Wireless Door Alarm M70 Security Breach

The Mengshen Wireless Door Alarm M70 is a wireless alarm from Mengshen. A security vulnerability exists in Mengshen Wireless Door Alarm M70 version 2024-05-24, which originates from the ability to bypass authentication via the capture replay method...

SUSE-SU-2024:2447-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024111 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spinlock in unixgc bsc1223683. - CVE-2024-26930: Fixed double free of the ha-vpmap pointer bsc1223681. - CVE-2024-26828:...

Deep Sea Electronics DSE855 Remote Authentication Bypass

Deep Sea Electronics DSE855 Remote Authentication Bypass Vendor: Deep Sea Electronics plc Product web page: https://www.deepseaelectronics.com Affected version: Model: DSE855 Software version: 1.0.26 Module version: 1.0.78 Bootloader version: 1.0.3 Firmware version: 1.1.0 Summary: The DSE855...

Fedoraproject Fedora SEoL (24.x)

According to its version, Fedoraproject Fedora is 24.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 ...

CVE-2024-27812

creationtimestamp| type| source ---|---|--- 2024-06-24 11:08:01+00:00| published-proof-of-concept| https://t.me/truesecator/5888 2024-06-24 23:49:14+00:00| seen| https://t.me/habrcomnews/28801 2024-06-25 04:32:23+00:00| published-proof-of-concept|...

trinitycollege.com Cross Site Scripting vulnerability OBB-3938431

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sabahulkesi.com Cross Site Scripting vulnerability OBB-3938354

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Uber Menu Plugin <= 3.8.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Uber Menu Type Plugin Vulnerable versions = 3.8.3 Fixed in 3.8.4 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-3593 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID b1b8ab906f9b Credits M.Awad Required privilege...

lacasavalencia.es Cross Site Scripting vulnerability OBB-3938173

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE-SU-2024:2163-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024111 fixes several issues. The following security issues were fixed: - CVE-2024-26852: Fixed use-after-free in ip6routempathnotify bsc1223059. - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi bsc1221302. - CVE-2022-48651: Fixed an...