CVE-2023-32604

creationtimestamp| type| source ---|---|--- 2023-06-27 02:21:51+00:00| seen| https://t.me/cibsecurity/65536 2023-06-27 02:27:54+00:00| seen| https://t.me/cibsecurity/65564...

CVE-2023-32526

creationtimestamp| type| source ---|---|--- 2023-06-27 02:21:50+00:00| seen| https://t.me/cibsecurity/65535 2023-06-27 02:27:52+00:00| seen| https://t.me/cibsecurity/65562...

CVE-2023-34418

A valid, authenticated LXCA user may be able to gain unauthorized access to events and other data stored in LXCA due to a SQL injection vulnerability in a specific web API...

CVE-2023-29427

Unauth. Reflected Cross-Site Scripting XSS vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin = 1.0.75 versions...

CVE-2023-29427

Unauth. Reflected Cross-Site Scripting XSS vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin = 1.0.75 versions...

CVE-2023-29427 WordPress Amelia Plugin <= 1.0.75 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin = 1.0.75 versions...

CVE-2023-29427

CVE-2023-29427 – Amelia WordPress plugin : Unauthenticated Reflected Cross-Site Scripting (XSS) in the TMS Booking for Appointments and Events Calendar. Affected versions: Amelia plugin

CVE-2023-29427 WordPress Amelia Plugin <= 1.0.75 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin = 1.0.75 versions...

PT-2023-24864 · Lenovo · Lenovo Xclarity Administrator

Name of the Vulnerable Software and Affected Versions: Lenovo XClarity Administrator LXCA affected versions not specified Description: A SQL injection vulnerability in a specific web API may allow a valid, authenticated LXCA user to gain unauthorized access to events and other data stored in LXCA...

Vega 输入验证错误漏洞

Vega is a Javscript-based software from the Vega team that can be used to create interactive visual displays. The software can describe data visualizations using JSON format and generate interactive views using HTML5 Canvas or SVG. Vega version 0.71.5 suffers from an input validation error...

SUSE-SU-2023:2613-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398...

kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance Events

The Linux kernel's Performance Events subsystem has a use-after-free flaw that occurs when a user triggers the perfgroupdetach and removeonexec functions simultaneously. This flaw allows a local user to crash or potentially escalate their privileges on the system...

kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance Events

The Linux kernel's Performance Events subsystem has a use-after-free flaw that occurs when a user triggers the perfgroupdetach and removeonexec functions simultaneously. This flaw allows a local user to crash or potentially escalate their privileges on the system...

CVE-2022-26376

creationtimestamp| type| source ---|---|--- 2023-06-19 19:55:30+00:00| seen| https://t.me/RussianOSINT/2677 2023-06-20 08:44:38+00:00| seen| https://t.me/habrcomnews/18854 2023-06-20 09:57:08+00:00| seen| https://t.me/kasperskyb2b/705 2023-06-20 10:50:44+00:00| seen| https://t.me/thehackernews/35...

SUSE-SU-2023:2546-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398...

SUSE-SU-2023:2545-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398...

motorsport-events.se Cross Site Scripting vulnerability OBB-3446268

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE-SU-2023:2533-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398...

EventON < 2.1.2 - Unauthenticated Event Access

The plugin lacks authentication and authorization in its eventonicsdownload ajax action, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id. PoC https://example.com/wp-admin/admin-ajax.php?action=eventonicsdownloadid=value...

CVE-2023-32571

creationtimestamp| type| source ---|---|--- 2023-06-15 15:11:02+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6862 2023-06-16 11:01:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8497 2023-11-25 04:56:10+00:00| seen| https://t.me/arpsyndicate/573...