it-americano.cc Cross Site Scripting vulnerability OBB-3274383

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-30406

creationtimestamp| type| source ---|---|--- 2023-04-25 02:35:47+00:00| seen| https://t.me/cibsecurity/62784...

CVE-2023-2019

creationtimestamp| type| source ---|---|--- 2023-04-25 00:19:47+00:00| seen| https://t.me/cibsecurity/62778...

CVE-2023-29530

creationtimestamp| type| source ---|---|--- 2023-04-25 00:19:46+00:00| seen| https://t.me/cibsecurity/62777...

CVE-2023-2260

creationtimestamp| type| source ---|---|--- 2023-04-25 00:19:42+00:00| seen| https://t.me/cibsecurity/62776...

CVE-2022-28354

creationtimestamp| type| source ---|---|--- 2023-04-25 00:19:41+00:00| seen| https://t.me/cibsecurity/62775...

WordPress Mocho Blog Theme <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)

Software Mocho Blog Type Theme Vulnerable versions = 1.0.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-27412 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 085597533752 Credits László Radnai Required...

WordPress Everest News Theme <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

Software Everest News Type Theme Vulnerable versions = 1.1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-27421 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c15b03e345f4 Credits László Radnai Required...

WordPress Viable blog Theme <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)

Software Viable blog Type Theme Vulnerable versions = 1.1.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-27419 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID bc9810b2a616 Credits László Radnai Required...

WordPress WP Popups Plugin < 2.1.5.1 is vulnerable to Cross Site Scripting (XSS)

Software WP Popups Type Plugin Vulnerable versions 2.1.5.1 Fixed in 2.1.5.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1905 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 10bebf67691e Credits Erwan LR Required...

CVE-2023-29413

creationtimestamp| type| source ---|---|--- 2023-04-19 00:29:43+00:00| seen| https://t.me/cibsecurity/62399 2023-04-25 17:40:06+00:00| seen| https://t.me/truesecator/4321...

CVE-2023-2057

creationtimestamp| type| source ---|---|--- 2023-04-14 18:25:59+00:00| seen| https://t.me/cibsecurity/62154...

Nextcloud Server 25.x < 25.0.3 DoS Vulnerability (GHSA-9wmj-gp8v-477j)

Nextcloud Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Nextcloud Server 24.0.4 < 24.0.10, 25.x < 25.0.4 Improper Access Control Vulnerability (GHSA-w47p-f66h-h2vj)

Nextcloud Server is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2022-29825

creationtimestamp| type| source ---|---|--- 2023-03-30 20:05:02+00:00| published-proof-of-concept| https://t.me/icscert/728 2025-04-25 18:08:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13483...

The US Is Sending Money to Countries Devastated by Cyberattacks

The White House is providing $25 million to Costa Rica, after giving Albania similar aid following aggression by hackers linked to Iran...

CVE-2022-28302

creationtimestamp| type| source ---|---|--- 2023-03-29 22:25:51+00:00| seen| Telegram/eyodvYnH2yinXcQPZZBWW6Id6ecEJvimJ2cZSspgWtlRhQ...

CVE-2022-37367

creationtimestamp| type| source ---|---|--- 2023-03-29 22:25:46+00:00| seen| https://t.me/cibsecurity/61083...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-1204)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1204 advisory. - A use-after-free flaw was found in the Linux kernel's Amateur Radio AX.25 protocol functionality in the way a...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-1205)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1205 advisory. - A NULL pointer dereference flaw was found in the Linux kernel's Amateur Radio AX.25 protocol functionality in...