CVE-2024-0692

creationtimestamp| type| source ---|---|--- 2024-03-01 10:21:46+00:00| seen| https://t.me/ctinow/197474 2024-03-01 10:26:51+00:00| seen| https://t.me/ctinow/197477 2024-03-15 04:09:49+00:00| seen| https://t.me/arpsyndicate/4214 2024-03-28 22:46:22+00:00| published-proof-of-concept|...

CVE-2023-7165

creationtimestamp| type| source ---|---|--- 2024-02-27 10:26:10+00:00| seen| https://t.me/ctinow/194184 2024-02-27 10:26:29+00:00| seen| https://t.me/ctinow/194198 2026-04-09 03:37:19+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-7165.yam...

cjhana.co.kr Cross Site Scripting vulnerability OBB-3858817

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Design/Logic Flaw

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/memhp: Fix access beyond end of drmem array dlparmemoryremovebyindex may access beyond the bounds of the drmem lmb array when the LMB lookup fails to match an entry with the given DRC index. When the search fails,...

danishapiro.brownpapertickets.com Cross Site Scripting vulnerability OBB-3855864

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

liege.formation-logistique.be Cross Site Scripting vulnerability OBB-3851866

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-0986

creationtimestamp| type| source ---|---|--- 2024-01-29 01:26:09+00:00| seen| https://t.me/ctinow/175035 2024-02-21 08:36:51+00:00| seen| https://t.me/ctinow/189341 2024-04-16 03:27:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7067 2024-04-16 06:27:50+00:00|...

CVE-2024-0936 van_der_Schaar LAB TemporAI PKL File load_from_file deserialization

A vulnerability classified as critical was found in vanderSchaar LAB TemporAI 0.0.3. Affected by this vulnerability is the function loadfromfile of the component PKL File Handler. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the...

CVE-2024-23055

creationtimestamp| type| source ---|---|--- 2024-01-25 23:26:55+00:00| seen| https://t.me/ctinow/173872 2024-02-02 21:16:45+00:00| seen| https://t.me/ctinow/178273 2024-02-18 19:46:11+00:00| seen| https://t.me/ctinow/187346 2025-06-17 14:40:18+00:00| published-proof-of-concept|...

CVE-2023-6697

creationtimestamp| type| source ---|---|--- 2024-01-24 15:26:49+00:00| seen| https://t.me/ctinow/172834 2024-02-17 19:16:24+00:00| seen| https://t.me/ctinow/187023 2024-12-14 05:38:37+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-6697.yam...

becomingme.it Improper Access Control vulnerability OBB-3838465

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2019-17233

creationtimestamp| type| source ---|---|--- 2024-01-15 22:26:38+00:00| seen| https://t.me/pytar/231 2025-09-18 00:09:27+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-17233.yaml 2025-09-19 21:02:32+00:00| seen|...

CVE-2023-6750

creationtimestamp| type| source ---|---|--- 2024-01-13 00:41:11+00:00| seen| https://t.me/ctinow/167634 2026-04-09 04:41:17+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-6750.yaml 2026-04-10 21:03:06+00:00| seen|...

PT-2024-14: Path Traversal and Untrusted Upload File in Pandora FMS

The vulnerability was identified in Pandora FMS, versions from 700 through 776. The vulnerability allows to modify directories, create and upload files outside of authorized directories. The vulnerability is a part of a chain that leads to remote code execution and complete server compromise...

CVE-2024-21641

creationtimestamp| type| source ---|---|--- 2024-01-05 22:26:53+00:00| seen| https://t.me/ctinow/163749 2024-01-24 16:16:18+00:00| seen| https://t.me/ctinow/172878 2025-04-24 09:13:16+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-21641.ya...

CVE-2023-6421

creationtimestamp| type| source ---|---|--- 2024-01-01 16:26:27+00:00| seen| https://t.me/ctinow/161365 2024-01-02 01:31:16+00:00| seen| https://t.me/cibsecurity/74092 2024-01-08 23:17:25+00:00| seen| https://t.me/ctinow/164698 2024-01-22 13:11:42+00:00| seen| https://t.me/ctinow/171136 2025-04-0...

PT-2024-61: OS Command Injection in Vinteo Videoconferencing Server

The vulnerability was identified in Vinteo Videoconferencing Server, version 29.2.18. The discovered vulnerability can be exploited by an attacker to execute commands with superuser privileges. Vulnerability status: Confirmed by vendor Recommendations: Update to version v29.3.6 or higher...

CVE-2023-49230

creationtimestamp| type| source ---|---|--- 2023-12-28 05:26:21+00:00| seen| https://t.me/ctinow/159920 2024-01-04 21:21:54+00:00| seen| https://t.me/ctinow/163221 2024-01-19 18:47:04+00:00| seen| https://t.me/ctinow/170346 2025-07-08 18:24:31+00:00| confirmed|...

PT-2024-12: SQL Injection in Cacti

The vulnerability was identified in Cacti version 1.2.25 and below. It allows to execute arbitrary SQL code. The vulnerability can be exploited by an authorized user using the vulnerable component pollers.php. Vulnerability status: Confirmed by vendor Date of vulnerability detection: 22.12.2023...

PT-2024-11: Local file Inclusion in Cacti

The vulnerability was identified in Cacti version 1.2.25 and below. It leads to the possibility of executing arbitrary code on the server. The vulnerability can be exploited by an authorized user using SQL injection and due to insufficient processing of the path to the included file. Vulnerabilit...