fitforfun.de Cross Site Scripting vulnerability OBB-3819809

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2023-9993755)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

CVE-2023-50830

CVE-2023-50830 affects Seos Contact Form up to version 1.8.0, with an Unpatched Stored Cross-Site Scripting vulnerability in input handling during web page generation. Root cause is improper neutralization of input, enabling stored XSS. Public references (Wordfence/Red Hat) corroborate the CVE an...

CVE-2023-50823

CVE-2023-50823 is a stored XSS in the WordPress plugin CSS & JavaScript Toolbox (affected up to version 11.7). The issue stems from improper input neutralization during web page generation, enabling stored scripts to execute in the context of the affected site. Public issuances (NVD and Red Hat) ...

natural-esthetics.com Cross Site Scripting vulnerability OBB-3819503

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Urgent: New Chrome Zero-Day Vulnerability Exploited in the Wild - Update ASAP

Google has rolled out security updates for the Chrome web browser to address a high-severity zero-day flaw that it said has been exploited in the wild. The vulnerability, assigned the CVE identifier CVE-2023-7024, has been described as a heap-based buffer overflow bug in the WebRTC framework that...

karneval-in-goettelborn.de Improper Access Control vulnerability OBB-3819179

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2023:4912-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4912-1 advisory. - Firefox Extended Support Release 115.6.0 ESR changelog-entry bsc1217974 CVE-2023-6856: Heap-buffer-overflow affecting WebGL...

CVE-2023-6280

CVE-2023-6280 describes an XXE (XML External Entity) vulnerability in the 52North Web Processing Service (WPS). The issue affects 52North WPS versions prior to 4.0.0-beta.11, where the WebProcessingService servlet may process external entities, allowing an attacker to retrieve files by issuing HT...

birthdaycake24.com Cross Site Scripting vulnerability OBB-3818577

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

jjsfiresupply.com Cross Site Scripting vulnerability OBB-3818498

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

centrum-zahnmedizin-bgl.de Improper Access Control vulnerability OBB-3818118

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

boettcher-productions.de Improper Access Control vulnerability OBB-3817604

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

zaharkids.com Improper Access Control vulnerability OBB-3815861

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

web-empresas.com Improper Access Control vulnerability OBB-3815591

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-49185

CVE-2023-49185 : Doofinder for WooCommerce (WordPress) is vulnerable to reflected XSS due to improper input neutralization during web page generation. Affected: Doofinder WP & WooCommerce Search plugin versions

CVE-2023-48494

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48444

CVE-2023-48444 concerns Adobe Experience Manager (AEM) versions 6.5.18 and earlier. The issue is a stored XSS in vulnerable form fields that could allow a low-privileged attacker to inject malicious scripts, with execution in the victim’s browser when visiting the affected page. The provided sour...

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2023-10110056)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2023-10113049)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...