Oracle MySQL Connectors C++ and ODBC (January 2024 CPU)

The 8.1.0 versions of MySQL Connectors installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2024 CPU advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/C++ OpenSSL. Supported versions that are affected are...

WordPress Ninja Tables Plugin <= 5.0.5 is vulnerable to Broken Access Control

Software Ninja Tables Type Plugin Vulnerable versions = 5.0.5 Fixed in 5.0.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-23504 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 86a45ee34ff9 Credits emad Required privilege...

Oracle MySQL Enterprise Monitor (January 2024 CPU)

The versions of MySQL Enterprise Monitor installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2024 CPU advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/C++ OpenSSL. Supported versions that are affected are...

Oracle WebCenter Sites (January 2024 CPU)

The 12.2.1.4.0 version of WebCenter Sites installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2024 CPU advisory. - Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: Advanced UI. The supported version that is...

militarysinglesconnection.com Cross Site Scripting vulnerability OBB-3838143

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vitalabs.com Cross Site Scripting vulnerability OBB-3838051

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-22403

creationtimestamp| type| source ---|---|--- 2024-01-18 21:26:20+00:00| seen| https://t.me/ctinow/169944 2024-01-18 22:26:25+00:00| seen| https://t.me/ctinow/169974 2026-07-26 02:00:20+00:00| seen| https://t.me/cyberwarehouse/476 2026-07-27 00:00:22+00:00| seen| https://t.me/cyberwarehouse/476...

ferretdavant.com Cross Site Scripting vulnerability OBB-3837836

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

dynamiccommunicationbook.com Cross Site Scripting vulnerability OBB-3837817

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

RHSA-2024:0299

creationtimestamp| type| source ---|---|--- 2024-01-18 18:16:35+00:00| seen| https://t.me/ctinow/169864...

CVE-2022-48577

creationtimestamp| type| source ---|---|--- 2024-01-18 15:47:11+00:00| seen| https://t.me/ctinow/169786...

gnurf.net Cross Site Scripting vulnerability OBB-3837622

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

new-biolife.kutethemes.net Cross Site Scripting vulnerability OBB-3837576

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Oracle Releases Critical Patch Update Advisory for January 2024

Oracle released its Critical Patch Update Advisory for January 2024 to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Oracle’s January 2024...

Atlassian Releases Security Updates for Multiple Products

Atlassian released a security advisory to address a vulnerability CVE-2023-22527 in out-of-date versions of Confluence Data Center and Server as well as its January 2024 security bulletin to address vulnerabilities in multiple products. A malicious cyber actor could exploit one of these...

holidaydiscovery.com Cross Site Scripting vulnerability OBB-3837520

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-6340

creationtimestamp| type| source ---|---|--- 2024-01-18 01:31:13+00:00| seen| https://t.me/ctinow/169535 2024-02-03 20:26:23+00:00| seen| https://t.me/ctinow/178637...

Oracle Database Server (January 2024 CPU)

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2024 CPU advisory. - Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.21 and 21.3-21.12. Easi...

WordPress Getwid – Gutenberg Blocks Plugin <= 2.0.4 is vulnerable to Bypass Vulnerability

Software Getwid – Gutenberg Blocks Type Plugin Vulnerable versions = 2.0.4 Fixed in 2.0.5 OWASP Top 10 A1: Broken Access Control Classification Bypass Vulnerability CVE CVE-2023-6963 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID cbf13618cdfb Credits Lucio Sá Required...

Oracle WebLogic Server (January 2024 CPU)

The version of Oracle WebLogic Server installed on the remote host is missing a security patch from the January 2024 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities, including: - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware...