19 matches found
SUSE-SU-2026:0472-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim bsc1256280. - CVE-2025-39880: libceph: fix invalid accesses to cephconnectionv1info bsc1250388. -...
CVE-2025-14316
The AhaChat Messenger Marketing WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2025-14316
The AhaChat Messenger Marketing WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2025-14316 AhaChat Messenger Marketing <= 1.1 - Reflected XSS
The AhaChat Messenger Marketing WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2025-14316
The AhaChat Messenger Marketing WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
EUVD-2025-140701
Malicious code in ksai-ka-aha npm...
EUVD-2025-139510
Malicious code in nuilva-dadre-aha npm...
SafeKey: Amplifying Aha-Moment Insights for Safety Reasoning
Large Reasoning Models LRMs introduce a new generation paradigm of explicitly reasoning before answering, leading to remarkable improvements in complex tasks. However, they pose great safety risks against harmful queries and adversarial attacks. While recent mainstream safety efforts on LRMs,...
CVE-2024-12595
The AHAthat Plugin WordPress plugin through 1.6 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...
Artica Proxy Unauthenticated PHP Deserialization Vulnerability
Vulnerability Details Affected Vendor: Artica Affected Product: Artica Proxy Affected Version: 4.50 Platform: Debian 10 LTS CWE Classification: CWE-502 Deserialization of Untrusted Data CVE ID: CVE-2024-2054 2. Vulnerability Description The Artica Proxy administrative web application will...
aha-dic.com Cross Site Scripting vulnerability OBB-3854388
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
aha-dic.com Cross Site Scripting vulnerability OBB-1369599
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Takeover v0.2 - Sub-Domain TakeOver Vulnerability Scanner
Sub-domain takeover vulnerability occur when a sub-domain subdomain.example.com is pointing to a service e.g: GitHub , AWS/S3 ,.. that has been removed or deleted. This allows an attacker to set up a page on the service that was being used and point their page to that sub-domain. For example, if...
aha-dic.com XSS vulnerability
Open Bug Bounty ID: OBB-679199 Description| Value ---|--- Affected Website:| aha-dic.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Subaru car software vulnerability analysis—never a failure of token-vulnerability warning-the black bar safety net
Not long ago, one from California car, information security researcher Aaron Guzman, in Australia, held a computer security conference to introduce a black into the Subaru car of the method. In his own 2017 Subaru WRX STI was found in a surprising number of software vulnerabilities, through these...
aha-printshop.de XSS vulnerability
Vulnerable URL: http://aha-printshop.de/search.php?s=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 23264824 Google Pagerank| 0 VIP website status:| No Che...
IconLover 5.42 - Local Buffer Overflow Exploit
Exploit for windows platform in category local exploits Exploit Title: IconLover v5.42 Buffer Overflow Exploit Date: 29/09/2015 Exploit Author: cor3sm4sh3r Contact: https://in.linkedin.com/in/cor3sm4sh3r Twitter: https://twitter.com/cor3sm4sh3r Category: Local Tested : win XP professional sp2 '''...
IconLover 5.42 - Local Buffer Overflow
IconLover 5.42 - Local Buffer Overflow Exploit Title: IconLover v5.42 Buffer Overflow Exploit Date: 29/09/2015 Exploit Author: cor3sm4sh3r Author email: cor3sm4sh3ratgmail.com Contact: https://in.linkedin.com/in/cor3sm4sh3r Twitter: https://twitter.com/cor3sm4sh3r Category: Local Tested : win XP...
IconLover 5.42 - Local Buffer Overflow
Exploit Title: IconLover v5.42 Buffer Overflow Exploit Date: 29/09/2015 Exploit Author: cor3sm4sh3r Author email: cor3sm4sh3ratgmail.com Contact: https://in.linkedin.com/in/cor3sm4sh3r Twitter: https://twitter.com/cor3sm4sh3r Category: Local Tested : win XP professional sp2 ''' Credits & Authors:...