1852 matches found
CVE-2023-6474
creationtimestamp| type| source ---|---|--- 2023-12-22 08:51:41+00:00| seen| https://t.me/ctinow/158252...
CVE-2023-48808
creationtimestamp| type| source ---|---|--- 2023-12-21 14:42:41+00:00| seen| https://t.me/ctinow/157718...
CVE-2023-29066
creationtimestamp| type| source ---|---|--- 2023-12-20 08:41:51+00:00| seen| https://t.me/ctinow/156803...
GHSA-HFMC-7525-MJ55
creationtimestamp| type| source ---|---|--- 2023-12-18 20:31:41+00:00| seen| https://t.me/ctinow/156090...
CVE-2023-43074
creationtimestamp| type| source ---|---|--- 2023-10-23 18:37:41+00:00| seen| https://t.me/cibsecurity/72769...
CVE-2023-5308
creationtimestamp| type| source ---|---|--- 2023-10-20 12:41:19+00:00| seen| https://t.me/cibsecurity/72676...
PT-2023-29205 · Liferay · Plugin For Oauth 2.0 +2
Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.4.3.41 through 7.4.3.89 Liferay DXP 7.4 update 41 through update 89 Description: Multiple reflected cross-site scripting XSS vulnerabilities exist in the Plugin for OAuth 2.0 module's OAuth2ProviderApplicationRedirec...
CVE-2023-39923
creationtimestamp| type| source ---|---|--- 2023-10-03 16:41:14+00:00| seen| https://t.me/cibsecurity/71490...
SUSE SLES15 Security Update : kernel (Live Patch 41 for SLE 15 SP1) (SUSE-SU-2023:3809-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3809-1 advisory. This update for the Linux Kernel 4.12.14-150100197148 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed...
Mozilla Thunderbird Security Advisories (MFSA2023-41, MFSA2023-43) - Mac OS X
Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...
Mozilla Firefox Security Advisory (MFSA2023-41) - Linux
The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2023-41. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
Mozilla Firefox < 118.0
The version of Firefox installed on the remote Windows host is prior to 118.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-41 advisory. - Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidenc...
World’s Largest Cryptocurrency Casino Stake Hacked for $41 Million
By Deeba Ahmed Ethereum Network Stake Loses $41 Million Worth of Crypto After Private Key Leak. This is a post from HackRead.com Read the original post: Worlds Largest Cryptocurrency Casino Stake Hacked for $41 Million...
CVE-2023-3936
creationtimestamp| type| source ---|---|--- 2023-08-21 20:41:02+00:00| seen| https://t.me/cibsecurity/68888...
Cross site scripting
Zimbra Collaboration ZCS 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client...
CVE-2023-38750
CVE-2023-38750 affects Zimbra Collaboration (ZCS) versions 8.x up to 8.8.15 Patch 41, 9.x up to 9.0.0 Patch 34, and 10.x up to 10.0.2, where internal JSP/XML files can be exposed (information disclosure). The vulnerability is linked to exposure of internal JSP and XML files and has been described...
Vulnerabilities fixed in Zimbra
Vulnerabilities have been fixed in Zimbra. A malicious party could exploit vulnerabilities to gain access to system data, bypass a security measure, or launch a Cross-Site Scripting attack. Such an attack can lead to execution of arbitrary code in the context of the victim's victim's browser, or...
CVE-2023-37580
Zimbra Collaboration ZCS 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client. Recent assessments: ccondon-r7 at January 28, 2024 7:36pm UTC reported: Per Google’s Threat Analysis Group TAG, this bug was exploited as a zero-day and has been used by at least four different threat...