CVE-2019-8815

creationtimestamp| type| source ---|---|--- 2024-01-31 08:01:51+00:00| seen| https://t.me/ctinow/176533 2024-01-31 09:41:59+00:00| seen| https://t.me/ctinow/176594 2024-01-31 10:36:50+00:00| seen| https://t.me/ctinow/176630 2024-01-31 17:17:17+00:00| seen| https://t.me/ctinow/176901 2024-02-01...

GHSA-J6VV-VV26-RH7C

creationtimestamp| type| source ---|---|--- 2024-01-31 00:52:10+00:00| seen| https://t.me/ctinow/176382...

WordPress PropertyHive Plugin <= 2.0.6 is vulnerable to Broken Access Control

Software PropertyHive Type Plugin Vulnerable versions = 2.0.6 Fixed in 2.0.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-24718 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4eea0b5c54d4 Credits Yudistira Arya Required privileg...

WordPress Review Schema Plugin <= 2.1.14 is vulnerable to Broken Access Control

Software Review Schema Type Plugin Vulnerable versions = 2.1.14 Fixed in 2.2.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-0836 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 61e084c0e677 Credits Francesco Carlucci Required...

WordPress ERE Recently Viewed Plugin <= 1.3 is vulnerable to PHP Object Injection

Software ERE Recently Viewed Type Plugin Vulnerable versions = 1.3 Fixed in 2.0 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-24797 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 835850fa9817 Credits Yudistira Arya Required privilege...

KB5035238: Security update for Windows 10, version 1507 and Windows Server 2016 for RSAT: January 31, 2024

None None...

RHSA-2024:0618

creationtimestamp| type| source ---|---|--- 2024-01-30 17:16:15+00:00| seen| https://t.me/ctinow/176084...

derinyaartexhibition.com.au Cross Site Scripting vulnerability OBB-3846435

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

people.epfl.ch Cross Site Scripting vulnerability OBB-3846351

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

nickrichardsonlaw.com Cross Site Scripting vulnerability OBB-3846289

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pcbwing.com Cross Site Scripting vulnerability OBB-3846228

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

RHSA-2024:0572

creationtimestamp| type| source ---|---|--- 2024-01-30 14:21:48+00:00| seen| https://t.me/ctinow/175926...

WordPress Don't Muck My Markup Plugin <= 1.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software Don't Muck My Markup Type Plugin Vulnerable versions = 1.8 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-23510 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 9934a7f8d741 Credits Nguyen Xuan Chien...

WordPress WP GDPR Compliance Plugin <= 2.0.22 is vulnerable to Broken Access Control

Software WP GDPR Compliance Type Plugin Vulnerable versions = 2.0.22 Fixed in 2.0.23 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-6700 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 6a981b3b2d5a Credits Lucio Sá Required...

GHSA-MRX3-GXJX-HJQJ

creationtimestamp| type| source ---|---|--- 2024-01-29 23:46:32+00:00| seen| https://t.me/ctinow/175608 2025-01-05 08:10:44+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3ley6aa6xjr2i...

kentgolf.org Cross Site Scripting vulnerability OBB-3845995

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pridefilms.de Cross Site Scripting vulnerability OBB-3845946

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mangl.at Cross Site Scripting vulnerability OBB-3845856

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

concertation.be Cross Site Scripting vulnerability OBB-3845824

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hotelsprague.cz Cross Site Scripting vulnerability OBB-3845683

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...