CVE-2024-0185

creationtimestamp| type| source ---|---|--- 2024-01-02 02:26:45+00:00| seen| https://t.me/ctinow/161442 2024-01-03 01:30:37+00:00| seen| https://t.me/cibsecurity/74120 2024-01-08 21:17:12+00:00| seen| https://t.me/ctinow/164636 2024-01-22 13:41:28+00:00| seen| https://t.me/ctinow/171161 2024-01-2...

CVE-2024-0183

creationtimestamp| type| source ---|---|--- 2024-01-02 00:26:07+00:00| seen| https://t.me/ctinow/161431 2024-01-02 01:31:45+00:00| seen| https://t.me/cibsecurity/74098 2024-01-08 21:17:15+00:00| seen| https://t.me/ctinow/164638 2024-01-22 13:41:25+00:00| seen| https://t.me/ctinow/171159 2024-01-2...

CVE-2023-5991

creationtimestamp| type| source ---|---|--- 2023-12-26 20:26:55+00:00| seen| https://t.me/ctinow/159442 2024-01-02 23:16:52+00:00| seen| https://t.me/ctinow/162086...

CVE-2023-51094

creationtimestamp| type| source ---|---|--- 2023-12-26 19:27:11+00:00| seen| https://t.me/ctinow/159407 2023-12-30 08:16:27+00:00| seen| https://t.me/ctinow/160796 2024-01-19 13:11:54+00:00| seen| https://t.me/ctinow/170183...

CVE-2023-43851

creationtimestamp| type| source ---|---|--- 2023-12-26 19:27:03+00:00| seen| https://t.me/ctinow/159401...

CVE-2023-5467

creationtimestamp| type| source ---|---|--- 2023-12-26 17:33:39+00:00| seen| https://t.me/cibsecurity/71898...

snisurset.net Cross Site Scripting vulnerability OBB-3823598

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

akkodis-asp-team.com Cross Site Scripting vulnerability OBB-3823575

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

speakthewordaudio.com Cross Site Scripting vulnerability OBB-3823533

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-51654

creationtimestamp| type| source ---|---|--- 2023-12-26 07:26:50+00:00| seen| https://t.me/ctinow/159268...

monumenta.ch Cross Site Scripting vulnerability OBB-3823471

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress HT Mega Plugin <= 2.3.8 is vulnerable to Cross Site Scripting (XSS)

Software HT Mega Type Plugin Vulnerable versions = 2.3.8 Fixed in 2.3.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50901 Patch priority Medium CVSS severity Medium 7.1 Developer HTMega PSID 46290c97b255 Credits Le Ngoc Anh Required privilege Unauthenticated...

WordPress Popup by Supsystic Plugin <= 1.10.19 is vulnerable to Broken Access Control

Software Popup by Supsystic Type Plugin Vulnerable versions = 1.10.19 Fixed in 1.10.20 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-51353 Patch priority Medium CVSS severity Medium 5.3 Developer Supsystic PSID eb9cfbfe68fb Credits Abdi Pranata Required...

WordPress Beaver Builder Plugin <= 2.7.2 is vulnerable to Cross Site Scripting (XSS)

Software Beaver Builder Type Plugin Vulnerable versions = 2.7.2 Fixed in 2.7.2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50889 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c34e72dc456f Credits Rafie Muhammad Patchstack Required...

WordPress User Feedback Plugin <= 1.0.10 is vulnerable to Broken Access Control

Software User Feedback Type Plugin Vulnerable versions = 1.0.10 Fixed in 1.0.11 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-50887 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 72613a1d0e22 Credits Revan Arifio Required privile...

GHSA-PQJ5-37XF-X5GC

creationtimestamp| type| source ---|---|--- 2023-12-21 19:26:39+00:00| seen| https://t.me/ctinow/157907...

GHSA-6M9R-7WRX-XMR6

creationtimestamp| type| source ---|---|--- 2023-12-21 19:26:37+00:00| seen| https://t.me/ctinow/157905...

Vinchin Backup And Recovery Command Injection Exploit

This Metasploit module exploits a command injection vulnerability in Vinchin Backup & Recovery v5.0., v6.0., v6.7., and v7.0.. Due to insufficient input validation in the checkIpExists API endpoint, an attacker can execute arbitrary commands as the web server user. This module requires Metasploit...

Nextcloud Server Multiple Vulnerabilities (GHSA-3f8p-6qww-2prr, GHSA-5j2p-q736-hw98)

Nextcloud Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nextcloud:nextcloudserver"...

CVE-2023-42366

creationtimestamp| type| source ---|---|--- 2023-12-17 11:37:00+00:00| seen| https://t.me/ctinow/155580 2026-02-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...