Remote code execution

A remote code execution RCE vulnerability in the xmlrpc.php endpoint of NodeBB Inc NodeBB forum software prior to v1.18.6 allows attackers to execute arbitrary code via crafted XML-RPC requests...

CVE-2023-43187

A remote code execution RCE vulnerability in the xmlrpc.php endpoint of NodeBB Inc NodeBB forum software prior to v1.18.6 allows attackers to execute arbitrary code via crafted XML-RPC requests...

CVE-2023-43187

A remote code execution RCE vulnerability in the xmlrpc.php endpoint of NodeBB Inc NodeBB forum software prior to v1.18.6 allows attackers to execute arbitrary code via crafted XML-RPC requests...

90GB of Data Posted on Hacker Forum Linked to T-Mobile Glitch

By Waqas Another day, another data security incident at T-Mobile - Because why not! A cybersecurity year without a T-Mobile… This is a post from HackRead.com Read the original post: 90GB of Data Posted on Hacker Forum Linked to T-Mobile Glitch...

The vulnerability of the Admin CP configuration module of the MyBB forum creation software allows a hacker to execute arbitrary code.

The vulnerability of the Admin CP module for the MyBB forum creation software is related to improper code generation during template processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SUSE SLES15: libopenvswitch-3_1-0 / libovn-23_03-0 / openvswitch3 / etc (SUSE-SU-2023:3710-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3710-1 advisory. - CVE-2023-3153: Fixed service monitor MAC flow is not rate limited bsc1212125. Tenable has extracted the preceding...

FBI Hacker Dropped Stolen Airbus Data on 9/11

In December 2022, KrebsOnSecurity broke the news that a cybercriminal using the handle "USDoD" had infiltrated the FBIs vetted information sharing network InfraGard, and was selling the contact information for all 80,000 members. The FBI responded by reverifying InfraGard members and by seizing t...

onlinemarketingforum.nl Cross Site Scripting vulnerability OBB-3673187

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mineral-forum.com Cross Site Scripting vulnerability OBB-3672733

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE CVE-2023-3152

A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum Site 1.0. This affects an unknown part of the file admin\posts\viewpost.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

CVE-2023-2453 Local file Inclusion (LFI) in Forum Infusion via Directory Traversal

There is insufficient sanitization of tainted file names that are directly concatenated with a path that is subsequently passed to a ‘requireonce’ statement. This allows arbitrary files with the ‘.php’ extension for which the absolute path is known to be included and executed. There are no known...

CVE-2023-41538

phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

CVE-2023-41538

phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

CVE-2023-41538

phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

Cross site scripting

phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

CVE-2023-41538

PHPJabbers PHP Forum Script 3.0 is affected by a Cross-Site Scripting (XSS) vulnerability via the keyword parameter. Unauthenticated attackers can inject malicious JavaScript through the keyword parameter, potentially stealing forum administrator session cookies and accessing sensitive discussion...

PT-2023-27965 · Phpjabbers · Phpjabbers Php Forum Script

Name of the Vulnerable Software and Affected Versions: phpjabbers PHP Forum Script version 3.0 Description: The issue concerns a Cross Site Scripting XSS flaw via the keyword parameter. This allows for potential malicious script injection, affecting the security of the application. Recommendation...

CVE-2023-41538

phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

CVE-2023-41538

phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

CVE-2023-41362

MyBB before 1.8.36 allows Code Injection by users with certain high privileges. Templates in Admin CP intentionally use eval, and there was some validation of the input to eval, but type juggling interfered with this when using PCRE within PHP...