CVE-2022-0250

creationtimestamp| type| source ---|---|--- 2022-07-04 16:12:29+00:00| seen| https://t.me/cibsecurity/45559 2024-12-02 11:15:10+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-0250.yaml...

super-roll.de Cross Site Scripting vulnerability OBB-2717640

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kalakendra.com Cross Site Scripting vulnerability OBB-2715200

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-25003

creationtimestamp| type| source ---|---|--- 2022-06-29 11:03:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6293 2022-12-08 09:11:43+00:00| published-proof-of-concept| https://t.me/poxek/2605 2022-12-08 11:09:59+00:00| published-proof-of-concept|...

CVE-2021-41460

creationtimestamp| type| source ---|---|--- 2022-06-28 16:36:09+00:00| seen| https://t.me/cibsecurity/45291 2023-08-22 10:38:38+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-41460.yaml...

Malicious Package

Overview vor-test-project-npm-please-ignore-1 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

Malicious Package

Overview klook-tetris-server is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Note: This malicious package was uncovered by o...

CVE-2022-2130

creationtimestamp| type| source ---|---|--- 2022-06-20 12:26:18+00:00| seen| https://t.me/cibsecurity/44811 2024-11-27 11:46:27+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-2130.yaml...

CVE-2019-17671

creationtimestamp| type| source ---|---|--- 2022-06-18 10:22:36+00:00| published-proof-of-concept| https://t.me/arm1tage/129 2024-01-16 10:36:22+00:00| seen| https://t.me/ctinow/168734 2025-12-04 01:12:40+00:00| confirmed|...

CVE-2021-42887

creationtimestamp| type| source ---|---|--- 2022-06-03 16:26:30+00:00| seen| https://t.me/cibsecurity/43814 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-42887.yaml...

PT-2022-13: Stored Cross-Site Scripting (Stored XSS) in ZoneMinder

The vulnerability was identified in ZoneMinder versions up to 1.36.14. The «Stored XSS» vulnerability allows a remote attacker to perform cross-site scripting XSS attacks. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 27.05.2022 Recommendations: Update to version...

CVE-2022-1711

creationtimestamp| type| source ---|---|--- 2022-05-17 16:27:24+00:00| seen| https://t.me/cibsecurity/42803 2025-05-01 10:53:42+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-1711.yaml 2025-05-02 21:02:23+00:00| seen|...

CVE-2022-0873

creationtimestamp| type| source ---|---|--- 2022-05-16 18:26:27+00:00| seen| https://t.me/cibsecurity/42735 2025-12-22 11:21:44+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-0873.yaml 2025-12-23 21:02:58+00:00| seen|...

CVE-2021-42192

creationtimestamp| type| source ---|---|--- 2022-05-04 14:34:49+00:00| seen| https://t.me/cibsecurity/41891 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-42192.yaml...

CVE-2022-0783

creationtimestamp| type| source ---|---|--- 2022-05-02 20:27:59+00:00| seen| https://t.me/cibsecurity/41734 2025-05-28 08:04:58+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-0783.yaml...

CVE-2022-28508

creationtimestamp| type| source ---|---|--- 2022-04-30 03:26:47+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2067 2022-04-30 17:55:24+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5909 2025-04-24 13:45:33+00:00| confirmed|...

CVE-2022-25226

creationtimestamp| type| source ---|---|--- 2022-04-18 20:29:32+00:00| seen| https://t.me/cibsecurity/41035 2025-02-11 16:54:10+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-25226.yaml 2025-02-12 21:02:00+00:00| seen|...

jiameilight.com Cross Site Scripting vulnerability OBB-2511152

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-31805

creationtimestamp| type| source ---|---|--- 2022-04-13 21:36:47+00:00| seen| https://t.me/ctinow/50238 2022-04-14 16:45:03+00:00| exploited| https://t.me/truesecator/2850 2022-04-15 11:33:35+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1954 2023-04-27 09:58:59+00:00| confirmed|...

ilwol.co.kr Cross Site Scripting vulnerability OBB-2503276

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...