papuzze.it Cross Site Scripting vulnerability OBB-3650654

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

begniscatering.gr Cross Site Scripting vulnerability OBB-3575340

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-4136

creationtimestamp| type| source ---|---|--- 2023-08-03 18:40:02+00:00| seen| https://t.me/cibsecurity/67683 2025-06-02 16:52:14+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-4136.yaml 2025-06-04 21:02:24+00:00| seen|...

CVE-2023-3990

creationtimestamp| type| source ---|---|--- 2023-07-28 12:29:15+00:00| seen| https://t.me/cibsecurity/67359 2024-12-05 13:57:04+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-3990.yaml...

vbm.kulturhotell.se Cross Site Scripting vulnerability OBB-3536996

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-22047

creationtimestamp| type| source ---|---|--- 2023-07-19 00:36:40+00:00| seen| https://t.me/cibsecurity/66974 2025-04-02 03:22:13+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/28808 2025-04-02 11:00:05+00:00| published-proof-of-concept|...

PT-2024-03: Vulnerability of reading internal application files in OpenKeychain

The vulnerability was identified in OpeKeychain v.5.8.2 58902. It allows a potential attacker to read any files available to an application including from the application sandbox and save files to external storage. The vulnerability is caused by insufficient filtering of input parameters...

cuisine-lifestyle.eu Cross Site Scripting vulnerability OBB-3518176

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mirae.com Cross Site Scripting vulnerability OBB-3505719

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-1119

creationtimestamp| type| source ---|---|--- 2023-07-10 20:23:59+00:00| seen| https://t.me/cibsecurity/66256 2024-12-12 20:42:31+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-1119.yaml 2025-02-19 21:02:35+00:00| seen|...

building.rmutl.ac.th Cross Site Scripting vulnerability OBB-3487913

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-07: Deserialization of Untrusted Data leads to RCE in Orchid Platform

The vulnerability was identified in Orchid Platform versions 14.0.0-alpha4-14.4.0. The discovered vulnerability of untrusted data deserialization may be exploited by an attacker to remotely execute malicious code. Vulnerability status: Confirmed by vendor Date of vulnerability remediation:...

superprof.it Cross Site Scripting vulnerability OBB-3472343

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

icetraining.info Cross Site Scripting vulnerability OBB-3462146

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

munifhijjaz2u.klikzen.com Cross Site Scripting vulnerability OBB-3459268

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

limpulsion.fr Cross Site Scripting vulnerability OBB-3406860

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

NOT CONFIRMED

Lines of code L1 Vulnerability details MITIGATED Assessed type Under/Overflow --- The text was updated successfully, but these errors were encountered: All reactions...

M-01 Unmitigated

Lines of code L1 Vulnerability details Lines of code L1 Vulnerability details Confirmed --- The text was updated successfully, but these errors were encountered: All reactions...

meerenbosch.nl Cross Site Scripting vulnerability OBB-3330498

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mitigation Confirmed for M-01

MITIGATION IS NOT CONFIRMED MITIGATION IS NOT CONFIRMED Mitigation of M-01: Issue not mitigated Link to Issue: code-423n4/2023-03-asymmetry-findings1078 Comments While the "division before multiplication" issues described in M-01 have been mitigated in the proposed changeset, there are other case...