ukp.co.kr Cross Site Scripting vulnerability OBB-3063815

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lederkram.de Cross Site Scripting vulnerability OBB-3063550

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-42904

creationtimestamp| type| source ---|---|--- 2022-11-19 00:29:51+00:00| seen| https://t.me/cibsecurity/53192 2025-04-30 14:13:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14043...

CVE-2022-45387

creationtimestamp| type| source ---|---|--- 2022-11-16 07:54:57+00:00| seen| https://t.me/cibsecurity/53002 2025-04-30 18:14:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14113...

CVE-2022-45400

creationtimestamp| type| source ---|---|--- 2022-11-16 07:54:49+00:00| seen| https://t.me/cibsecurity/52996 2025-04-30 16:14:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14080...

CVE-2022-40309

creationtimestamp| type| source ---|---|--- 2022-11-16 07:54:35+00:00| seen| https://t.me/cibsecurity/52987 2024-10-10 19:09:53+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7426 2025-04-30 16:14:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14077...

CVE-2022-43693

creationtimestamp| type| source ---|---|--- 2022-11-16 07:51:40+00:00| seen| https://t.me/cibsecurity/52973 2025-04-30 15:13:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14050...

CVE-2022-41260

creationtimestamp| type| source ---|---|--- 2022-11-09 00:41:51+00:00| seen| https://t.me/cibsecurity/52693 2025-04-30 18:14:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14105...

Hands-On IoT Hacking: Rapid7 at DEF CON 30 IoT Village, Pt. 4

Welcome back to our blog series on Rapid7's IoT Village exercise from DEF CON 30. In our previous posts, we covered how to achieve access to flash memory, how to extract file system data from the device, and how to modify the data we've extracted. In this post, we'll cover how to gain root access...

CVE-2022-44317

creationtimestamp| type| source ---|---|--- 2022-11-08 18:35:30+00:00| seen| https://t.me/cibsecurity/52652 2025-05-01 15:15:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14300...

csabazar.hu Cross Site Scripting vulnerability OBB-3043218

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

helgolandappartement.de Cross Site Scripting vulnerability OBB-3034024

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Hands-On IoT Hacking: Rapid7 at DEF CON 30 IoT Village, Pt. 3

Welcome back to our blog series on Rapid7's IoT Village exercise from DEF CON 30. In our previous posts, we covered how to achieve access to flash memory and how to extract file system data from the device. In this post, we'll cover how to modify the data we've extracted. Modify extracted file...

Debian DSA-5266-1 : expat - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5266 advisory. - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations...

Hands-On IoT Hacking: Rapid7 at DEF CON 30 IoT Village, Pt. 2

Welcome back to our blog series on Rapid7's IoT Village exercise from DEF CON 30. Last week, we covered the basics of the exercise and achieving access to flash memory. In this post, we'll cover how to extract partition data. Extracting partition data The next step in our hands-on IoT hacking...

Hands-On IoT Hacking: Rapid7 at DEF CON 30 IoT Village, Part 1

Rapid7 was back this year at DEF CON 30 participating at the IoT Village with another hands-on hardware hacking exercise, with the goal of teaching attendees' various concepts and methods for IoT hacking. Over the years, these exercises have covered several different embedded device topics,...

CVE-2022-3521

creationtimestamp| type| source ---|---|--- 2022-10-16 14:30:44+00:00| seen| https://t.me/cibsecurity/51531...

eius.it Cross Site Scripting vulnerability OBB-2995405

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

eprints.lib.hokudai.ac.jp Cross Site Scripting vulnerability OBB-2982188

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

clibsa.com Cross Site Scripting vulnerability OBB-2969952

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...