CVE-2024-6096

creationtimestamp| type| source ---|---|--- 2024-07-24 16:38:50+00:00| seen| https://t.me/cvedetector/1562 2025-04-26 00:07:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13558...

GHSA-5GRX-V727-QMQ6

creationtimestamp| type| source ---|---|--- 2024-07-23 17:20:16+00:00| published-proof-of-concept| https://t.me/CNArsenal/2834 2024-07-26 05:11:20+00:00| published-proof-of-concept| https://t.me/Kelvinseccommunity/592 2024-07-27 12:01:41+00:00| published-proof-of-concept|...

CVE-2024-37432

creationtimestamp| type| source ---|---|--- 2024-07-22 11:57:26+00:00| seen| https://t.me/cvedetector/1391...

CVE-2024-38713

creationtimestamp| type| source ---|---|--- 2024-07-20 11:26:42+00:00| seen| https://t.me/cvedetector/1261...

CVE-2022-48831

creationtimestamp| type| source ---|---|--- 2024-07-16 15:26:13+00:00| seen| https://t.me/cvedetector/932...

SUSE SLES15 Security Update : kernel (Live Patch 26 for SLE 15 SP4) (SUSE-SU-2024:2449-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2449-1 advisory. This update for the Linux Kernel 5.14.21-15040024119 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed...

Provisioning Services Cannot Connect to SQL Express

During setup using the Provisioning Services Configuration Wizard, connecting to a Microsoft SQL Express instance installed on another machine fails with the error “Invalid Server”. The specific error code is either “error: 26” or “error: 28”;A network-related or instance-specific error occurred...

CVE-2024-40539

creationtimestamp| type| source ---|---|--- 2024-07-12 19:26:55+00:00| seen| https://t.me/cvedetector/770...

CVE-2024-27784

creationtimestamp| type| source ---|---|--- 2024-07-09 18:57:55+00:00| seen| https://t.me/cvedetector/372 2026-03-26 10:57:30+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-nginx...

Fedoraproject Fedora SEoL (26.x)

According to its version, Fedoraproject Fedora is 26.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 ...

AZL-43474 CVE-2024-37298 affecting package podman 4.1.1-26

gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of...

CVE-2024-31485

creationtimestamp| type| source ---|---|--- 2024-06-26 18:00:07+00:00| published-proof-of-concept| https://t.me/truesecator/5903 2024-06-26 20:16:26+00:00| seen| https://t.me/icscert/860...

CVE-2024-31486

creationtimestamp| type| source ---|---|--- 2024-06-26 18:00:07+00:00| published-proof-of-concept| https://t.me/truesecator/5903 2024-06-26 20:16:26+00:00| seen| https://t.me/icscert/860...

safetec.com Cross Site Scripting vulnerability OBB-3939088

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

spartanien.de Cross Site Scripting vulnerability OBB-3939077

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

verrieres-aube.com Cross Site Scripting vulnerability OBB-3939068

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Advanced Custom Fields PRO Plugin < 6.3.2 is vulnerable to Broken Access Control

Software Advanced Custom Fields PRO Type Plugin Vulnerable versions 6.3.2 Fixed in 6.3.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37250 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 5d5f89be56d4 Credits Rafie Muhammad...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: Im appearing on a panel on Society and Democracy at ACM Collective Intelligence in Boston, Massachusetts. The conference runs from June 26 through 29, 2024, and my panel is at 9:00 AM on Friday, June 28. Im speaking on "Reimagining...

Mozilla Firefox Security Update (mfsa_2024-23_2024-26) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Himer - Social Questions and Answers < 2.1.1 - Contributor+ Stored XSS

Description The theme does not sanitise and escape some of its Post settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting attacks PoC The PoC will be displayed on June 26, 2024, to give users the time to update...