lullar-com-3.appspot.com Cross Site Scripting vulnerability OBB-3106792

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

farbenfinder.de Cross Site Scripting vulnerability OBB-3106525

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

yu-chang.com.tw Cross Site Scripting vulnerability OBB-3106127

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vambery.net Cross Site Scripting vulnerability OBB-3105948

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

signature-inc.net Cross Site Scripting vulnerability OBB-3105933

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

m.foroxity.nl Cross Site Scripting vulnerability OBB-3104629

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lyceumevents.org Cross Site Scripting vulnerability OBB-3104623

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-42542

creationtimestamp| type| source ---|---|--- 2022-12-16 18:37:32+00:00| seen| https://t.me/cibsecurity/54731...

CVE-2022-42367

creationtimestamp| type| source ---|---|--- 2022-12-16 18:34:40+00:00| seen| https://t.me/cibsecurity/54724...

AMI UEFI Firmware December 2022 Security Update (TOCTOU)

A potential Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in certain HP PC products using AMI UEFI Firmware system BIOS which might allow arbitrary code execution, denial of service, and information disclosure. AMI has released updates to mitigate the potential...

kawano.18girl.club Cross Site Scripting vulnerability OBB-3102516

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

saimi.18girl.club Cross Site Scripting vulnerability OBB-3102468

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Update for .NET Core SDK (December 2022)

The Microsoft .NET Core SDK installation on the remote host is version affected by a remote code execution vulnerability when parsing maliciously crafted xps files. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Security Updates for Microsoft ASP.NET Core (December 2022)

A remote code execution vulnerability exists in ASP.NET core 3.1, ASP.NET 6.0, and ASP.NET 7.0, where a malicious actor could cause a user to run arbitrary code as a result of parsing maliciously crafted xps files. Note that Nessus has not tested for this issue but has instead relied only on the...

Security Updates for Microsoft .NET Framework (December 2022)

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in the handling of XPS files. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted fr...

kaldor-army.co.uk Cross Site Scripting vulnerability OBB-3101366

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

idun-nature.com Cross Site Scripting vulnerability OBB-3101350

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-31702

creationtimestamp| type| source ---|---|--- 2022-12-14 08:14:08+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus27/2022 2022-12-14 22:22:56+00:00| seen| https://t.me/cibsecurity/54554...

photokina.ma Cross Site Scripting vulnerability OBB-3100353

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Updates for Microsoft Dynamics 365 Business Central (December 2022)

The Microsoft Dynamics 365 Business Central install is missing a security update. It is, therefore, affected by an remote code execution vulnerability. A remote attacker with admin privileges can exploit this vulnerability to execute malicious instructions on their behalf. Note that Nessus has no...