briefmarken-24.de Cross Site Scripting vulnerability OBB-3196638

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE CVE-2008-2108

The GENERATESEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion due to insufficient precision, which produces 24 bits of entropy and simplifies brute force attacks against...

SUSE CVE-2013-0833

Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service out-of-bounds read via vectors related to printing...

Adobe Photoshop 23.x < 23.5.4 / 24.x < 24.1.1 Multiple Vulnerabilities (macOS APSB23-11)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 23.5.4/24.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-11 advisory. - Photoshop version 23.5.3 and earlier, 24.1 and earlier are affected by an out-of-bounds write...

CVE-2023-22345

creationtimestamp| type| source ---|---|--- 2023-02-13 07:29:41+00:00| seen| https://t.me/cibsecurity/57991 2026-01-24 21:24:41+00:00| seen| https://gist.github.com/alon710/25b7b7b0cbdb2042e87564dcca5bdb73 2026-01-24 22:32:10+00:00| seen|...

CVE-2023-23592

creationtimestamp| type| source ---|---|--- 2023-02-10 16:57:36+00:00| seen| https://t.me/cibsecurity/57893 2025-03-24 19:23:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8520...

CVE-2023-21441

creationtimestamp| type| source ---|---|--- 2023-02-09 22:26:24+00:00| seen| https://t.me/cibsecurity/57870 2025-03-24 19:23:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8507...

CVE-2022-48288

creationtimestamp| type| source ---|---|--- 2023-02-09 20:26:19+00:00| seen| https://t.me/cibsecurity/57846 2025-03-24 21:23:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8556...

CVE-2023-0690

creationtimestamp| type| source ---|---|--- 2023-02-08 22:25:24+00:00| seen| https://t.me/cibsecurity/57795 2025-03-24 21:23:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8552...

CVE-2022-34362

creationtimestamp| type| source ---|---|--- 2023-02-08 22:25:18+00:00| seen| https://t.me/cibsecurity/57789 2025-03-24 21:23:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8554...

CVE-2023-25150 Document content of files can be obtained through Collabora for files of other users

Nextcloud office/richdocuments is an office suit for the nextcloud server platform. In affected versions the Collabora integration can be tricked to provide access to any file without proper permission validation. As a result any user with access to Collabora can obtain the content of other users...

SUSE SLES12: kgraft-patch-4_12_14-122_110-default / etc (SUSE-SU-2023:0250-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0250-1 advisory. This update for the Linux Kernel 4.12.14-122110 fixes several issues. The following security issues were fixed: - CVE-2022-3424: Fixed...

PT-2023-2377 · Nextcloud +2 · Nextcloud +2

Name of the Vulnerable Software and Affected Versions: Nextcloud versions 24.0.4 through 24.0.6 Nextcloud versions 25.0.0 Description: The issue is related to improper access control in Nextcloud, a private cloud software. This can allow a remote attacker to gain unauthorized access to limited...

kokuen-zero.com Cross Site Scripting vulnerability OBB-3168079

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-21775

creationtimestamp| type| source ---|---|--- 2023-01-24 02:25:15+00:00| seen| https://t.me/cibsecurity/56880...

CVE-2023-21795

creationtimestamp| type| source ---|---|--- 2023-01-24 02:25:13+00:00| seen| https://t.me/cibsecurity/56878...

WordPress Ultimate Addons for Beaver Builder – Lite Plugin <= 1.5.5 is vulnerable to Broken Access Control

Software Ultimate Addons for Beaver Builder – Lite Type Plugin Vulnerable versions = 1.5.5 Fixed in 1.5.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-23882 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 952c840a7b12 Credits...

WordPress Timed Content Plugin < 2.73 is vulnerable to Cross Site Scripting (XSS)

Software Timed Content Type Plugin Vulnerable versions 2.73 Fixed in 2.73 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0067 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 0d11099524d5 Credits István Márton Required...

CVE-2021-24837

creationtimestamp| type| source ---|---|--- 2023-01-23 18:24:57+00:00| seen| https://t.me/cibsecurity/56831...

CVE-2023-22484

creationtimestamp| type| source ---|---|--- 2023-01-23 17:19:25+00:00| published-proof-of-concept| https://github.com/github/cmark-gfm/security/advisories/GHSA-24f7-9frr-5h2r 2023-01-24 02:25:16+00:00| seen| https://t.me/cibsecurity/56881...