portalrhdigital.com.br Cross Site Scripting vulnerability OBB-3765663

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-46417

creationtimestamp| type| source ---|---|--- 2023-10-26 00:39:23+00:00| seen| https://t.me/cibsecurity/72912...

CVE-2023-46137

creationtimestamp| type| source ---|---|--- 2023-10-26 00:39:15+00:00| seen| https://t.me/cibsecurity/72907 2024-01-26 23:33:51+00:00| seen| https://t.me/arpsyndicate/3116...

CVE-2023-46418

creationtimestamp| type| source ---|---|--- 2023-10-26 00:39:14+00:00| seen| https://t.me/cibsecurity/72906...

WordPress Current Menu Item for Custom Post Types Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Current Menu Item for Custom Post Types Type Plugin Vulnerable versions = 1.5 Fixed in 1.6 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-46781 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID eea8363457b5 Credits...

WordPress Auto Limit Posts Reloaded Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Auto Limit Posts Reloaded Type Plugin Vulnerable versions = 2.5 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-46778 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 73dd685c68a7 Credits Nguyen Xuan...

[SECURITY] Fedora 38 Update: fizz-2023.10.16.00-1.fc38

Fizz is a TLS 1.3 implementation. Fizz currently supports TLS 1.3 drafts 28, 26 both wire-compatible with the final specification, and 23. All major handshake modes are supported, includ ing PSK resumption, early data, client authentication, and HelloRetryRequest...

[SECURITY] Fedora 37 Update: fizz-2023.10.16.00-1.fc37

Fizz is a TLS 1.3 implementation. Fizz currently supports TLS 1.3 drafts 28, 26 both wire-compatible with the final specification, and 23. All major handshake modes are supported, includ ing PSK resumption, early data, client authentication, and HelloRetryRequest...

CVE-2023-5690

creationtimestamp| type| source ---|---|--- 2023-10-20 20:35:26+00:00| seen| https://t.me/cibsecurity/72705...

PT-2023-6219 · Nextcloud +2 · Nextcloud Enterprise Server +3

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions 25.0.0 through 25.0.8 Nextcloud Server versions 26.0.0 through 26.0.3 Nextcloud Enterprise Server versions 22.0.0 through 22.2.10.13 Nextcloud Enterprise Server versions 23.0.0 through 23.0.12.8 Nextcloud Enterprise...

CVE-2023-36568

creationtimestamp| type| source ---|---|--- 2023-10-10 22:26:50+00:00| seen| https://t.me/cibsecurity/72031...

AZL-43747 CVE-2023-44487 affecting package podman 4.1.1-26

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

fantatornei.com Cross Site Scripting vulnerability OBB-3711312

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pentesting.d2cmedia.ca Cross Site Scripting vulnerability OBB-3711305

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-43326

creationtimestamp| type| source ---|---|--- 2023-09-26 14:11:58+00:00| seen| https://t.me/cibsecurity/71028...

secure.freeparking.co.nz Cross Site Scripting vulnerability OBB-3711241

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-43278

creationtimestamp| type| source ---|---|--- 2023-09-26 02:39:29+00:00| seen| https://t.me/cibsecurity/71030...

CVE-2022-4245

creationtimestamp| type| source ---|---|--- 2023-09-26 00:34:27+00:00| seen| https://t.me/cibsecurity/71014...

WordPress User Avatar - Reloaded Plugin < 1.2.2 is vulnerable to Cross Site Scripting (XSS)

Software User Avatar - Reloaded Type Plugin Vulnerable versions 1.2.2 Fixed in 1.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4798 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a4fd94410ec4 Credits Dmitrii Ignatyev...

WordPress WP Job Portal Plugin <= 2.0.5 is vulnerable to SQL Injection

Software WP Job Portal Type Plugin Vulnerable versions = 2.0.5 Fixed in 2.0.6 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-4490 Patch priority High CVSS severity High 9.3 Developer Ahmad PSID 9b020cd17632 Credits Pablo Sanchez Required privilege Unauthenticated Published 2...