CVE-2023-6244

creationtimestamp| type| source ---|---|--- 2024-01-11 16:41:39+00:00| seen| https://t.me/ctinow/166637 2024-01-27 06:11:52+00:00| seen| https://t.me/ctinow/174638...

CVE-2024-20712

creationtimestamp| type| source ---|---|--- 2024-01-11 15:54:40+00:00| seen| https://t.me/itsecnews/3964...

Hozard Alarm system security breach

Hozard alarm system is an alarm system from Hozard. The Hozard Alarm system has a security vulnerability that stems from the lack of encryption of RFID tags...

CVE-2024-20697

creationtimestamp| type| source ---|---|--- 2024-01-09 20:16:34+00:00| seen| https://t.me/ctinow/165328 2024-04-18 17:15:40+00:00| published-proof-of-concept| https://t.me/CNArsenal/2343 2024-04-19 16:41:11+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10357 2024-04-20...

CVE-2024-20655 Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability

...

CVE-2024-20683 Win32k Elevation of Privilege Vulnerability

...

CVE-2024-21632 omniauth-microsoft_graph vulnerable to account takeover (nOAuth)

omniauth-microsoftgraph provides an Omniauth strategy for the Microsoft Graph API. Prior to versions 2.0.0, the implementation did not validate the legitimacy of the email attribute of the user nor did it give/document an option to do so, making it susceptible to nOAuth misconfiguration in cases...

ASB-A-303101624

Bulletin has no description...

CVE-2023-46495

creationtimestamp| type| source ---|---|--- 2023-12-31 17:41:51+00:00| seen| https://t.me/ctinow/161147...

Sesami Cash Point & Transport Optimizer Security Vulnerability

Sesami Cash Point & Transport Optimizer is a solution from Sesami, Inc. A security vulnerability exists in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 that stems from the presence of a cross-site scripting vulnerability. The vulnerability allows remote attackers to execute...

WordPress Checkout Mestres WP Plugin <= 7.1.9.7 is vulnerable to Privilege Escalation

Software Checkout Mestres WP Type Plugin Vulnerable versions = 7.1.9.7 Fixed in 7.1.9.8 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-51472 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 9fb8ab95cc18 Credits...

CVE-2023-47784

creationtimestamp| type| source ---|---|--- 2023-12-20 20:29:23+00:00| seen| https://t.me/ctinow/157287 2024-01-13 19:56:42+00:00| seen| https://t.me/ctinow/167904 2025-03-19 15:49:03+00:00| seen| MISP/2bb5c40c-5583-4a30-bc62-81e5a7af21a7...

OpenSC: Potential PIN bypass when card tracks its own login state

A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock a...

CVE-2017-8046

creationtimestamp| type| source ---|---|--- 2023-12-18 10:21:43+00:00| seen| https://t.me/arpsyndicate/1963 2024-12-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-26 2025-06-12 21:02:22+00:00| seen|...

CVE-2023-42326

creationtimestamp| type| source ---|---|--- 2023-12-12 18:42:51+00:00| exploited| https://t.me/truesecator/5193 2026-07-26 02:02:17+00:00| seen| https://t.me/EchelonEyes/2294 2026-07-26 07:01:48+00:00| seen| https://t.me/zhatez/853 2026-07-27 00:00:53+00:00| seen| https://t.me/EchelonEyes/2294...

putramanunggalfurniture.com Improper Access Control vulnerability OBB-3808691

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Navigate FDA 524b to get your medical cyber device to market

With amendment 524b officially enacted, medical devices across the United States and the globe are living under some new rules and procedures. You’re not alone if you are finding these new regulations a bit complex. Changes to business practices – particularly ones that involve millions of...

CVE-2023-26942

Weak encryption mechanisms in RFID Tags in Yale IA-210 Alarm v1.0 allows attackers to create a cloned tag via physical proximity to the original...

Yale Conexis L1 Security Vulnerability

The Yale Conexis L1 is a smart door lock from Yale. A security vulnerability exists in the Yale Conexis L1 v1.0.0, which stems from a weak encryption mechanism in the RFID tag that allows an attacker to create a clone of the original tag by physically approaching it...

Yale IA-210 Alarm Security Vulnerability

The Yale IA-210 Alarm is a residential alarm from Yale. The Yale IA-210 Alarm v1.0 version suffers from a security vulnerability that stems from a weak encryption mechanism in the RFID tag, which allows an attacker to create a cloned tag by physically approaching the original tag...