CVE-2021-24488

creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24488.yaml...

PT-2023-05: Unauth Buffer Overflow in sdwan_iface_ipc in Zyxel products

An issue was identified in Zyxel products affecting: ATP ZLD V5.10V5.32; USG FLEX ZLD V5.00V5.32; USG FLEX 50W/ USG20W-VPN ZLD V5.10V5.32; VPN ZLD V5.00V5.35. The discovered vulnerability of Buffer Overflow in sdwanifaceipc can be exploited by an unauthenticated attacker to dump the core with a...

xn--ok0bp9xjtbk2qvb977k.com Cross Site Scripting vulnerability OBB-3246497

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

schachundmuenzen.de Cross Site Scripting vulnerability OBB-3241805

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-27638

creationtimestamp| type| source ---|---|--- 2023-03-22 15:35:55+00:00| exploited| https://t.me/cibsecurity/60443 2025-05-29 13:34:47+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-27638.yaml 2025-05-31 21:02:20+00:00| seen|...

CVE-2023-27637

creationtimestamp| type| source ---|---|--- 2023-03-22 15:35:50+00:00| exploited| https://t.me/cibsecurity/60441 2025-05-29 13:34:23+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-27637.yaml 2025-05-30 21:02:20+00:00| seen|...

Nextcloud 安全漏洞

Nextcloud is a suite of open source, self-hosted file synchronization and sharing communication application platform from Nextcloud Germany. A security vulnerability exists in Nextcloud Server that stems from the fact that when an attacker gains access to a logged-in user session, they can...

Malicious Package

Overview sp-image-edit is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

europarl.europa.eu Cross Site Scripting vulnerability OBB-3209440

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious Package

Overview typeparsers is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview pino-deploy is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

CVE-2021-37305

creationtimestamp| type| source ---|---|--- 2023-02-03 20:21:04+00:00| seen| https://t.me/cibsecurity/57484 2023-05-18 00:58:05+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-37305.yaml 2025-11-01 21:02:24+00:00| seen|...

CVE-2021-37304

creationtimestamp| type| source ---|---|--- 2023-02-03 20:20:57+00:00| seen| https://t.me/cibsecurity/57478 2023-05-18 01:00:13+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-37304.yaml 2025-03-26 16:25:31+00:00| published-proof-of-concept...

CVE-2023-22952

creationtimestamp| type| source ---|---|--- 2023-02-03 06:39:42+00:00| exploited| https://t.me/thehackernews/3014 2023-03-09 17:01:25+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/sugarcrmwebshellcve202322952.rb 2023-03-11 12:57:01+00:00|...

Malicious Package

Overview charset-normalizer is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

martman.in Cross Site Scripting vulnerability OBB-3068619

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

amavi.co.il Cross Site Scripting vulnerability OBB-3050746

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

centralhotelapart.de Cross Site Scripting vulnerability OBB-3033567

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious Package

Overview t0jcl is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was install...

CVE-2022-40443

creationtimestamp| type| source ---|---|--- 2022-09-22 18:12:16+00:00| seen| https://t.me/cibsecurity/50264 2025-01-16 09:28:49+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-40443.yaml 2025-01-20 21:02:00+00:00| seen|...