lacitedesmortes.net Cross Site Scripting vulnerability OBB-3830060

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

adomin.ocnk.net Cross Site Scripting vulnerability OBB-3830056

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

law.net Cross Site Scripting vulnerability OBB-3830046

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

shibuya-univ.net Cross Site Scripting vulnerability OBB-3830044

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pfon.org Cross Site Scripting vulnerability OBB-3829976

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hisakata.co.jp Cross Site Scripting vulnerability OBB-3829906

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

RHSA-2024:0071

creationtimestamp| type| source ---|---|--- 2024-01-08 09:16:43+00:00| seen| https://t.me/ctinow/164239...

sdpscotland.co.uk Cross Site Scripting vulnerability OBB-3829842

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bowiestate.edu Cross Site Scripting vulnerability OBB-3829711

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Contact Form 7 Extension For Mailchimp Plugin <= 0.5.70 is vulnerable to Server Side Request Forgery (SSRF)

Software Contact Form 7 Extension For Mailchimp Type Plugin Vulnerable versions = 0.5.70 Fixed in N/A OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-22134 Patch priority Low CVSS severity Low 4.9 Developer Claim ownership PSID...

CVE-2023-49961

CVE-2023-49961 affects WALLIX Bastion (7.x–10.x) and WALLIX Access Manager (3.x–4.x) due to an Incorrect Access Control flaw that can lead to sensitive data exposure. Root cause: improper access-control checks exposing data. CVSS v3.1 base score 7.5 (HIGH). No exploitation details are provided in...

CVE-2023-41784

Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro...

CVE-2023-41784 Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro

Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro...

CVE-2023-41784

CVE-2023-41784 affects ZTE Red Magic 8 Pro and is described as a Permissions and Access Control vulnerability (improper access control). The NVD entry lists a local attack vector with low attack complexity, no privileges required, but user interaction required, and it can impact confidentiality (...

CVE-2023-41784 Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro

Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro...

Oracle Linux 8 : tigervnc (ELSA-2024-0018)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0018 advisory. - xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty CVE-2023-5367 - xorg-x11-server: Use-after-free bug in...

AlmaLinux 8 : thunderbird (ALSA-2024:0003)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2024:0003 advisory. - The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time. If present, Thunderbird did not...

Oracle Linux 8 : squid:4 (ELSA-2024-0046)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0046 advisory. - Fix squid: Denial of Service in SSL Certificate validation CVE-2023-46724 - Fix squid: NULL pointer dereference in the gopher protocol code...

AlmaLinux 8 : tigervnc (ALSA-2024:0018)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0018 advisory. - A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory...

PT-2024-12974 · Zte · Zte Red Magic 8 Pro

Name of the Vulnerable Software and Affected Versions: ZTE Red Magic 8 Pro affected versions not specified Description: The issue concerns a Permissions and Access Control Vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or detai...