PT-2023-18273 · Samsung · Exynos Baseband

Name of the Vulnerable Software and Affected Versions: Exynos baseband versions prior to SMR Jun-2023 Release 1 Description: The issue is a heap out-of-bound write vulnerability that allows a remote attacker to execute arbitrary code. Recommendations: For Exynos baseband versions prior to SMR...

Security Bulletin: IBM i Access Client Solutions - Windows Application Package is vulnerable to a timing issue with RSA Decryption in GSKit builds prior to 8.0.55.31 (CVE-2023-32342)

Summary IBM GSKit is used by IBM i Access Client Solutions - Windows Application Package when making TLS connections to an IBM i partition. If an RSA cipher is used, IBM GSKit could allow a remote attacker to obtain sensitive information. Vulnerability Details CVEID:CVE-2023-32342 DESCRIPTION: IB...

CVE-2022-31499

creationtimestamp| type| source ---|---|--- 2023-06-27 12:16:12+00:00| seen| MISP/9f779cbb-9e6b-40ed-bd06-92aeb6a8e437 2026-07-29 12:01:00+00:00| seen| https://t.me/CVEhub/2670 2026-07-30 00:01:38+00:00| seen| https://t.me/CVEhub/2670 2026-08-01 03:00:03+00:00| published-proof-of-concept|...

CVE-2023-32535

creationtimestamp| type| source ---|---|--- 2023-06-27 02:25:09+00:00| seen| https://t.me/cibsecurity/65561...

WordPress Booked Plugin < 2.4.4 is vulnerable to Sensitive Data Exposure

Software Booked Type Plugin Vulnerable versions 2.4.4 Fixed in 2.4.4 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2022-36399 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 0ab671e26c14 Credits coogee86 Required privilege...

WordPress Formidable Forms Plugin < 6.3.1 is vulnerable to Remote Code Execution (RCE)

Software Formidable Forms Type Plugin Vulnerable versions 6.3.1 Fixed in 6.3.1 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2023-2877 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 64ee0a3444e8 Credits Alex Sanford Required privilege...

pearson.fr Cross Site Scripting vulnerability OBB-3472142

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

regiojobs-st.de Cross Site Scripting vulnerability OBB-3472057

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tamasoft.co.jp Cross Site Scripting vulnerability OBB-3471877

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kobsa.net Cross Site Scripting vulnerability OBB-3471703

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

le-beffroi.be Cross Site Scripting vulnerability OBB-3471360

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

momentonoiva.com.br Cross Site Scripting vulnerability OBB-3471027

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

greattime.limitedrun.com Cross Site Scripting vulnerability OBB-3471002

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

polardistans.autoweb.no Cross Site Scripting vulnerability OBB-3470752

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

meijigakuin.ac.jp Cross Site Scripting vulnerability OBB-3470426

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

texcentrum.cz Cross Site Scripting vulnerability OBB-3470007

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress WP Mail Logging Plugin < 1.12.0 is vulnerable to Broken Access Control

Software WP Mail Logging Type Plugin Vulnerable versions 1.12.0 Fixed in 1.12.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID edb33842ede2 Credits Unknown Required privilege...

aveday.cz Cross Site Scripting vulnerability OBB-3469730

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

m.shanghaibang.net Cross Site Scripting vulnerability OBB-3469676

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

maestrilavoro.it Cross Site Scripting vulnerability OBB-3469425

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...