3685 matches found
WordPress JetSearch Plugin <= 3.1.2 is vulnerable to Broken Access Control
Software JetSearch Type Plugin Vulnerable versions = 3.1.2 Fixed in 3.1.2.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-48761 Patch priority Medium CVSS severity Medium 6.3 Developer Crocoblock PSID 7a898b33b365 Credits Rafie Muhammad Patchstack Requir...
WordPress Widgets for Yelp Reviews Plugin <= 11.0.2 is vulnerable to Arbitrary File Upload
Software Widgets for Yelp Reviews Type Plugin Vulnerable versions = 11.0.2 Fixed in 11.1 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2023-48275 Patch priority Medium CVSS severity Medium 8 Developer Claim ownership PSID 323b86ec1718 Credits Rafie Muhammad Patchstack...
WordPress Widgets for SourceForge Reviews Plugin <= 11.0.2 is vulnerable to Arbitrary File Upload
Software Widgets for SourceForge Reviews Type Plugin Vulnerable versions = 11.0.2 Fixed in 11.1 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2023-48275 Patch priority Medium CVSS severity Medium 8 Developer Claim ownership PSID 54da1ae2f502 Credits Rafie Muhammad...
WordPress JetProductGallery Plugin <= 2.1.13.1 is vulnerable to Broken Access Control
Software JetProductGallery Type Plugin Vulnerable versions = 2.1.13.1 Fixed in 2.1.13.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-48760 Patch priority Medium CVSS severity Medium 8.2 Developer Crocoblock PSID 7e68b6745d20 Credits Rafie Muhammad...
WordPress JetMenu Plugin <= 2.4.1 is vulnerable to Broken Access Control
Software JetMenu Type Plugin Vulnerable versions = 2.4.1 Fixed in 2.4.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-48761 Patch priority Medium CVSS severity Medium 6.3 Developer Crocoblock PSID ee6cfa0a1486 Credits Rafie Muhammad Patchstack Required...
WordPress JetReviews Plugin <= 2.3.2 is vulnerable to Broken Access Control
Software JetReviews Type Plugin Vulnerable versions = 2.3.2 Fixed in 2.3.2.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-48761 Patch priority Medium CVSS severity Medium 6.3 Developer Crocoblock PSID 02df9f71dc32 Credits Rafie Muhammad Patchstack...
WordPress MyTube PlayList Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)
Software MyTube PlayList Type Plugin Vulnerable versions = 2.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-48767 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d799e3ad1885 Credits Khalid Yusuf Required privilege...
CVE-2023-2598
creationtimestamp| type| source ---|---|--- 2023-11-19 13:23:12+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9423 2023-11-19 14:01:47+00:00| published-proof-of-concept| https://t.me/CNArsenal/1545 2023-11-19 15:41:51+00:00| published-proof-of-concept|...
CVE-2019-18660
creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:03+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5977 2024-02-28 20:16:53+00:00| seen| https://t.me/ctinow/195821...
rusty_paseto vulnerable to private key extraction due to ed25519-dalek dependency
Impact The vulnerability, known as RUSTSEC-2022-0093, impacts the ed25519-dalek crate, which is a dependency of the rusty-paseto crate. This issue arises from a "Double Public Key Signing Function Oracle Attack" affecting versions of ed25519-dalek prior to v2.0. These versions expose an unsafe AP...
[SECURITY] Fedora 37 Update: usd-22.05b-28.fc37
Universal Scene Description USD is a time-sampled scene description for interchange between graphics applications...
CVE-2023-43797
creationtimestamp| type| source ---|---|--- 2023-10-31 01:20:28+00:00| seen| https://t.me/cibsecurity/73193...
nagelstudio-gruehns.de Improper Access Control vulnerability OBB-3767655
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
moorregersv.de Improper Access Control vulnerability OBB-3767642
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
lionsradeberg.de Improper Access Control vulnerability OBB-3767612
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
hofmann-credner.de Improper Access Control vulnerability OBB-3767502
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
coloredgirls.brownpapertickets.com Cross Site Scripting vulnerability OBB-3767272
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-34832
creationtimestamp| type| source ---|---|--- 2023-10-28 00:17:37+00:00| seen| https://t.me/cibsecurity/73097...