CVE-2024-33897

A compromised HMS Networks Cosy+ device could be used to request a Certificate Signing Request from Talk2m for another device, resulting in an availability issue. The issue was patched on the Talk2m production server on April 18, 2024...

CVE-2024-33897

A compromised HMS Networks Cosy+ device could be used to request a Certificate Signing Request from Talk2m for another device, resulting in an availability issue. The issue was patched on the Talk2m production server on April 18, 2024...

CVE-2024-33897

The CVE-2024-33897 issue affects HMS Networks Cosy+ remote-access devices where a compromised Cosy+ could request a Certificate Signing Request (CSR) from Talk2m for another device, creating an availability risk. Root cause: improper handling of CSR requests via Talk2m could be abused, as describ...

AGCA – Custom Dashboard & Login Page < 7.2.2 - Admin+ Stored XSS via Image URL

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. 1. Navigate AGCA, and select the "Adm...

primeportal.net Cross Site Scripting vulnerability OBB-3266566

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rrrs7.azur-entrepreneurs.com Cross Site Scripting vulnerability OBB-3266366

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

nha.today Cross Site Scripting vulnerability OBB-3266321

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

dancefox-radio.de Cross Site Scripting vulnerability OBB-3266244

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hpsc.iwr.uni-heidelberg.de Cross Site Scripting vulnerability OBB-3266240

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

used.ca Cross Site Scripting vulnerability OBB-3266195

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ephesusboutiquehotel.com Cross Site Scripting vulnerability OBB-3266091

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

divinastar.it Cross Site Scripting vulnerability OBB-3266063

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-28964

creationtimestamp| type| source ---|---|--- 2023-04-18 02:28:51+00:00| seen| https://t.me/cibsecurity/62323...

CVE-2023-24501

creationtimestamp| type| source ---|---|--- 2023-04-18 02:28:50+00:00| seen| https://t.me/cibsecurity/62322...

CVE-2023-28968

creationtimestamp| type| source ---|---|--- 2023-04-18 02:28:43+00:00| seen| https://t.me/cibsecurity/62318...

applications-laser.fr Cross Site Scripting vulnerability OBB-3266011

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-30548

creationtimestamp| type| source ---|---|--- 2023-04-18 00:28:41+00:00| seen| https://t.me/cibsecurity/62308...

CVE-2022-27530

creationtimestamp| type| source ---|---|--- 2022-04-18 20:29:40+00:00| seen| https://t.me/cibsecurity/41040...

CVE-2021-20291

creationtimestamp| type| source ---|---|--- 2021-04-18 14:31:16+00:00| seen| https://t.me/CyberSecurityTechnologies/3154 2022-01-03 08:26:52+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3162...

Join Microsoft Security Response at the Product Security Operations forum at LocoMocoSec!

The MSRC is more than managing vulnerability reports, publishing Microsoft security updates, and defending the cloud. The MSRC is passionate about helping everyone improve internal engineering practices and supporting the defender community, and are excited to partner with Blackberry to host a...