CVE-2023-48603

creationtimestamp| type| source ---|---|--- 2024-01-06 15:56:49+00:00| seen| https://t.me/ctinow/163957...

uomax.com.ar Improper Access Control vulnerability OBB-3828857

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sunset.com Improper Access Control vulnerability OBB-3828836

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

stereomuch.it Improper Access Control vulnerability OBB-3828833

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-49658

creationtimestamp| type| source ---|---|--- 2024-01-04 15:21:43+00:00| seen| https://t.me/ctinow/163042 2024-01-05 01:33:40+00:00| seen| https://t.me/cibsecurity/74411 2024-01-06 22:25:18+00:00| seen| https://t.me/arpsyndicate/2580...

ASB-A-300090204

In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-49949

Passwork before 6.2.0 allows remote authenticated users to bypass 2FA by sending all one million of the possible 6-digit codes...

GTA 6 Hacker from Lapsus$ Gang Sentenced to Hospital

By Deeba Ahmed From Teen Prodigy to Cybercriminal: The Fall of a Lapsus$ Gang Member and the Dangers of the Online Underworld. This is a post from HackRead.com Read the original post: GTA 6 Hacker from Lapsus$ Gang Sentenced to Hospital...

CVE-2023-50993

Ruijie WS6008 v1.x v2.x ACRGOS11.96W3B2G2C6-0110221911 and WS6108 v1.x ACRGOS11.96W3B2G2C6-0110221911 was discovered to contain a command injection vulnerability via the function downFiles...

Command injection

Ruijie WS6008 v1.x v2.x ACRGOS11.96W3B2G2C6-0110221911 and WS6108 v1.x ACRGOS11.96W3B2G2C6-0110221911 was discovered to contain a command injection vulnerability via the function downFiles...

Authentication flaw

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 iLO 5 and Integrated Lights-Out 6 iLO 6. The vulnerability could be remotely exploited to allow authentication bypass...

CVE-2023-50272

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 iLO 5 and Integrated Lights-Out 6 iLO 6. The vulnerability could be remotely exploited to allow authentication bypass...

CVE-2023-50272

CVE-2023-50272 affects HPE Integrated Lights-Out 5 (iLO 5) and iLO 6. The provided documents indicate a vulnerability that could be exploited remotely to bypass authentication, with potential impacts on confidentiality, integrity, and availability as reflected in the NVD metrics (base score up to...

CVE-2023-6272

The Theme My Login 2FA WordPress plugin before 1.2 does not rate limit 2FA validation attempts, which may allow an attacker to brute-force all possibilities, which shouldn't be too long, as the 2FA codes are 6 digits...

Design/Logic Flaw

The Theme My Login 2FA WordPress plugin before 1.2 does not rate limit 2FA validation attempts, which may allow an attacker to brute-force all possibilities, which shouldn't be too long, as the 2FA codes are 6 digits...

CVE-2023-6272 Theme My Login 2FA < 1.2 - Lack of Rate Limiting

The Theme My Login 2FA WordPress plugin before 1.2 does not rate limit 2FA validation attempts, which may allow an attacker to brute-force all possibilities, which shouldn't be too long, as the 2FA codes are 6 digits...

CVE-2023-48642

Archer Platform 6.x before 6.13 P2 6.13.0.2 contains an authenticated HTML content injection vulnerability. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML code in a trusted application data store. When victim users access the data store through...

CVE-2023-48641

Archer Platform 6.x before 6.14 P1 HF2 6.14.0.1.2 contains an insecure direct object reference vulnerability. An authenticated malicious user in a multi-instance installation could potentially exploit this vulnerability by manipulating application resource references in user requests to bypass...

Design/Logic Flaw

Archer Platform 6.x before 6.13 P2 6.13.0.2 contains an authenticated HTML content injection vulnerability. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML code in a trusted application data store. When victim users access the data store through...

Authorization

Archer Platform 6.x before 6.14 P1 HF2 6.14.0.1.2 contains an insecure direct object reference vulnerability. An authenticated malicious user in a multi-instance installation could potentially exploit this vulnerability by manipulating application resource references in user requests to bypass...