CKEditor 安全漏洞

CKEditor is an open source, web-based text editor. A security vulnerability exists in CKEditor4 version 4.22 and later versions, which stems from a vulnerability that allows an attacker to take control of https://cke4.ckeditor.com域...

leqi99.com Cross Site Scripting vulnerability OBB-3956310

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

do713.com Cross Site Scripting vulnerability OBB-3954839

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Google Patches New Android Kernel Vulnerability Exploited in the Wild

Google has addressed a high-severity security flaw impacting the Android kernel that it said has been actively exploited in the wild. The vulnerability, tracked as CVE-2024-36971, has been described as a case of remote code execution impacting the kernel. "There are indications that CVE-2024-3697...

CVE-2024-34343

creationtimestamp| type| source ---|---|--- 2024-08-05 17:00:26+00:00| published-proof-of-concept| https://github.com/nuxt/nuxt/security/advisories/GHSA-vf6r-87q4-2vjf 2024-08-05 23:56:54+00:00| seen| https://t.me/cvedetector/2496 2025-09-12 15:01:41+00:00| seen|...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2018-0824 Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber...

Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability

Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script...

myflock2.com Cross Site Scripting vulnerability OBB-3952949

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tsung92.com Cross Site Scripting vulnerability OBB-3952946

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

819410.com Cross Site Scripting vulnerability OBB-3952603

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

wegate.web.fc2.com Open Redirect vulnerability OBB-3950813

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

port01.com Cross Site Scripting vulnerability OBB-3950640

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

haryana21.com Cross Site Scripting vulnerability OBB-3950376

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

adm76.com Cross Site Scripting vulnerability OBB-3949541

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

box-123.com Cross Site Scripting vulnerability OBB-3949516

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cosmos196102.blog.fc2.com Cross Site Scripting vulnerability OBB-3949355

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-38782

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MapsMarker.Com e.U. Leaflet Maps Marker allows Stored XSS.This issue affects Leaflet Maps Marker: from n/a through 3.12.9...

dorrigo1.com Cross Site Scripting vulnerability OBB-3947852

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the com.vmware.rvc plugin in the software for managing VMware vCenter Server allows a attacker to disclose sensitive information.

The vulnerability of the com.vmware.rvc plugin in the VMware vCenter Server virtualization infrastructure management software is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

Malicious code in test-ssssnpm-com-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c2a4fd579e0096b31822938848098183be8aa46f43fc6673a752707bdfeec544 The OpenSSF Package Analysis project identified 'test-ssssnpm-com-test' @ 1.999.0 npm as malicious. It is considered malicious because: - The...