CVE-2023-46562

creationtimestamp| type| source ---|---|--- 2023-10-25 22:52:58+00:00| seen| https://t.me/cibsecurity/72902...

stellar-strkey vulnerable to panic in SignedPayload::from_payload

Impact Panic vulnerability when a specially crafted payload is used. This is because of the following calculation: rust innerpayloadlen + 4 - innerpayloadlen % 4 % 4 If innerpayloadlen is 0xffffffff, 4 - innerpayloadlen % 4 % 4 = 1 so rust innerpayloadlen + 4 - innerpayloadlen % 4 % 4 = u32::MAX ...

CVE-2023-42627

creationtimestamp| type| source ---|---|--- 2023-10-17 16:32:58+00:00| seen| https://t.me/cibsecurity/72421 2023-12-28 19:16:28+00:00| seen| https://t.me/ctinow/160156 2025-06-12 15:34:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18185...

hagen-58.de Cross Site Scripting vulnerability OBB-3744375

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-3875

creationtimestamp| type| source ---|---|--- 2023-07-25 10:12:58+00:00| seen| https://t.me/cibsecurity/67207...

CVE-2023-37733

creationtimestamp| type| source ---|---|--- 2023-07-19 22:21:58+00:00| seen| https://t.me/cibsecurity/67018...

CVE-2023-25201

creationtimestamp| type| source ---|---|--- 2023-07-07 20:17:58+00:00| seen| https://t.me/cibsecurity/66206...

CVE-2020-36736

creationtimestamp| type| source ---|---|--- 2023-07-03 03:58:45+00:00| seen| https://t.me/cibsecurity/65847...

CVE-2023-27013

creationtimestamp| type| source ---|---|--- 2023-04-07 07:27:09+00:00| seen| https://t.me/cibsecurity/61636 2025-02-14 10:05:58+00:00| seen| Telegram/oi9pEo4KGGyZPVXmB9XSRpABw0G6yyvQG1vw7Vw34XYS7cY...

58.glawandius.com Cross Site Scripting vulnerability OBB-3248751

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-34412

creationtimestamp| type| source ---|---|--- 2023-03-16 15:30:58+00:00| seen| https://t.me/cibsecurity/60133...

SUSE CVE-2018-5092

A use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory prematurely instead of from memory in the main thread while cancelling fetch operations. This vulnerability affects Firefox 58...

SUSE CVE-2018-5103

A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.6, Firefox ESR 52.6, and Firefox 58...

SUSE CVE-2018-5106

Style editor traffic in the Developer Tools can be routed through a service worker hosted on a third party website if a user selects error links when these tools are open. This can allow style editor information used within Developer Tools to leak cross-origin. This vulnerability affects Firefox ...

SUSE CVE-2018-5104

A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.6, Firefox ESR 52.6, and Firefox 58...

SUSE CVE-2018-5107

The printing process can bypass local access protections to read files available through symlinks, bypassing local file restrictions. The printing process requires files in a specific format so arbitrary data cannot be read but it is possible that some local file information could be exposed. Thi...

SUSE CVE-2018-5111

When the text of a specially formatted URL is dragged to the addressbar from page content, the displayed URL can be spoofed to show a different site than the one loaded. This allows for phishing attacks where a malicious page can spoof the identify of another site. This vulnerability affects...

SUSE CVE-2018-5114

If an existing cookie is changed to be "HttpOnly" while a document is open, the original value remains accessible through script until that document is closed. Network requests correctly use the changed HttpOnly cookie. This vulnerability affects Firefox 58...

SUSE CVE-2018-5116

WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames are cross-origin. Malicious extensions can inject frames from arbitrary origins into the loaded page and then interact with them, bypassing same-origin user expectations with th...

SUSE CVE-2018-5122

A potential integer overflow in the "DoCrypt" function of WebCrypto was identified. If a means was found of exploiting it, it could result in an out-of-bounds write. This vulnerability affects Firefox 58...