vectorkhazana.com Cross Site Scripting vulnerability OBB-3829245

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

reneeregent.com Cross Site Scripting vulnerability OBB-3829215

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

powiat.konin.pl Cross Site Scripting vulnerability OBB-3829206

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

nobell.com Cross Site Scripting vulnerability OBB-3829189

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-48603

creationtimestamp| type| source ---|---|--- 2024-01-06 15:56:49+00:00| seen| https://t.me/ctinow/163957...

uomax.com.ar Improper Access Control vulnerability OBB-3828857

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sunset.com Improper Access Control vulnerability OBB-3828836

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

stereomuch.it Improper Access Control vulnerability OBB-3828833

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-49658

creationtimestamp| type| source ---|---|--- 2024-01-04 15:21:43+00:00| seen| https://t.me/ctinow/163042 2024-01-05 01:33:40+00:00| seen| https://t.me/cibsecurity/74411 2024-01-06 22:25:18+00:00| seen| https://t.me/arpsyndicate/2580...

ASB-A-300090204

In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-49949

Passwork before 6.2.0 allows remote authenticated users to bypass 2FA by sending all one million of the possible 6-digit codes...

GTA 6 Hacker from Lapsus$ Gang Sentenced to Hospital

By Deeba Ahmed From Teen Prodigy to Cybercriminal: The Fall of a Lapsus$ Gang Member and the Dangers of the Online Underworld. This is a post from HackRead.com Read the original post: GTA 6 Hacker from Lapsus$ Gang Sentenced to Hospital...

CVE-2023-50993

Ruijie WS6008 v1.x v2.x ACRGOS11.96W3B2G2C6-0110221911 and WS6108 v1.x ACRGOS11.96W3B2G2C6-0110221911 was discovered to contain a command injection vulnerability via the function downFiles...

Command injection

Ruijie WS6008 v1.x v2.x ACRGOS11.96W3B2G2C6-0110221911 and WS6108 v1.x ACRGOS11.96W3B2G2C6-0110221911 was discovered to contain a command injection vulnerability via the function downFiles...

CVE-2023-50993: Improper Neutralization of Special Elements used in an OS Command

Ruijie WS6008 v1.x v2.x ACRGOS11.96W3B2G2C6-0110221911 and WS6108 v1.x ACRGOS11.96W3B2G2C6-0110221911 was discovered to contain a command injection vulnerability via the function downFiles...

Authentication flaw

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 iLO 5 and Integrated Lights-Out 6 iLO 6. The vulnerability could be remotely exploited to allow authentication bypass...

CVE-2023-50272

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 iLO 5 and Integrated Lights-Out 6 iLO 6. The vulnerability could be remotely exploited to allow authentication bypass...

CVE-2023-50272

CVE-2023-50272 affects HPE Integrated Lights-Out 5 (iLO 5) and iLO 6. The provided documents indicate a vulnerability that could be exploited remotely to bypass authentication, with potential impacts on confidentiality, integrity, and availability as reflected in the NVD metrics (base score up to...

CVE-2023-50272: Authentication Bypass Using an Alternate Path or Channel

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 iLO 5 and Integrated Lights-Out 6 iLO 6. The vulnerability could be remotely exploited to allow authentication bypass...

CVE-2023-6272

The Theme My Login 2FA WordPress plugin before 1.2 does not rate limit 2FA validation attempts, which may allow an attacker to brute-force all possibilities, which shouldn't be too long, as the 2FA codes are 6 digits...