CVE-2023-1916

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff...

New Money Message Ransomware Gang Hits MSI, Threatens of Data Leak

By Waqas The Money Message ransomware group has reportedly demanded a ransom of $4 million from MSI. This is a post from HackRead.com Read the original post: New Money Message Ransomware Gang Hits MSI, Threatens of Data Leak...

OSV-2023-282 Heap-use-after-free in mrb_gc_mark

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57703 Crash type: Heap-use-after-free READ 4 Crash state: mrbgcmark mrbgcmarkiv gcmarkchildren...

craftercms 4.x.x - CORS

Exploit Title: craftercms 4.x.x - CORS Author: nu11secur1ty Date: 03.07.2023 Vendor: https://docs.craftercms.org/en/4.0/index.html Software: https://github.com/craftercms/craftercms/tags = 4.x.x Reference: https://portswigger.net/web-security/cors Description: The application implements an HTML5...

Fedora: Security Advisory for openbgpd (FEDORA-2023-c804000502)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

mmrda.maharashtra.gov.in Cross Site Scripting vulnerability OBB-3248353

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rksaccountants.com.au Cross Site Scripting vulnerability OBB-3248307

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

torontohousings.com Cross Site Scripting vulnerability OBB-3248182

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-1748

creationtimestamp| type| source ---|---|--- 2023-04-04 20:40:45+00:00| seen| https://t.me/cibsecurity/61412 2026-07-26 02:02:28+00:00| seen| https://t.me/EchelonEyes/1394 2026-07-27 00:01:05+00:00| seen| https://t.me/EchelonEyes/1394 2026-07-28 00:00:07+00:00| seen| https://t.me/EchelonEyes/1394...

irenebilinski.com Cross Site Scripting vulnerability OBB-3247791

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

marksmodels.com Cross Site Scripting vulnerability OBB-3247706

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pieldetoro.net Cross Site Scripting vulnerability OBB-3247660

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-25303

creationtimestamp| type| source ---|---|--- 2023-04-04 16:30:50+00:00| seen| https://t.me/cibsecurity/61393...

CVE-2023-26866

creationtimestamp| type| source ---|---|--- 2023-04-04 16:30:42+00:00| seen| https://t.me/cibsecurity/61388 2026-07-29 12:00:43+00:00| seen| https://t.me/CVEhub/9698 2026-07-30 00:01:13+00:00| seen| https://t.me/CVEhub/9698 2026-07-31 10:00:05+00:00| published-proof-of-concept|...

CVE-2023-23686

creationtimestamp| type| source ---|---|--- 2023-04-04 16:30:34+00:00| seen| https://t.me/cibsecurity/61383...

estateagentslive.net Cross Site Scripting vulnerability OBB-3247427

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Discover a new era of security with Microsoft at RSAC 2023

We’re thrilled to participate and connect with you at RSA Conference 2023 RSAC from April 23 to 27, 2023, in San Francisco. Join your security peers as we welcome you to the new era of security—shaped by the power of OpenAI’s GPT-4 generative AI—and introduce to you the recently announced Microso...

Discover a new era of security with Microsoft at RSAC 2023

We’re thrilled to participate and connect with you at RSA Conference 2023 RSAC from April 23 to 27, 2023, in San Francisco. Join your security peers as we welcome you to the new era of security—shaped by the power of OpenAI’s GPT-4 generative AI—and introduce to you the recently announced Microso...

v-ua.com Cross Site Scripting vulnerability OBB-3246998

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...