redwingshoes.com Cross Site Scripting vulnerability OBB-3244066

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mtcxx.com Cross Site Scripting vulnerability OBB-3244038

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Changes to Citrix Workspace Standard and ShareFile Content Collaboration in Citrix Workspace Bundles

Effective April 17, 2023, Cloud Software Group has made the decision to end of renewal EoR Citrix Workspace Standard and remove ShareFile Content Collaboration from the Citrix Workspace cloud and on-prem subscriptions. This change is part of our ongoing efforts to enhance our product offerings an...

CVE-2023-26801

creationtimestamp| type| source ---|---|--- 2023-03-27 00:39:20+00:00| seen| https://t.me/cibsecurity/60763 2023-05-26 16:50:05+00:00| seen| https://t.me/truesecator/4428 2023-07-12 13:01:49+00:00| seen| MISP/d1468160-fde0-4647-9b90-2fd4be8c85b2 2024-01-08 18:40:02+00:00| seen|...

CVE-2023-1177

creationtimestamp| type| source ---|---|--- 2023-03-24 17:50:55+00:00| seen| https://t.me/cibsecurity/60645 2023-03-28 11:01:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8011 2023-03-29 17:51:47+00:00| published-proof-of-concept|...

GHSA-9C6G-QPGJ-RVXW Streamlit publishes previously-patched Cross-site Scripting vulnerability

Synopsis: Streamlit open source publicizes a prior security fix implemented in 2021. The vulnerability affected Streamlit versions between 0.63.0 and 0.80.0 inclusive and was patched on April 21, 2021. If you are using Streamlit with version before 0.63.0 or after 0.80.0, no action is required. 1...

CISA Issues Urgent Warning: Adobe ColdFusion Vulnerability Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency CISA on March 15 added a security vulnerability impacting Adobe ColdFusion to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The critical flaw in question is CVE-2023-26360 CVSS score: 8.6, which...

CVE-2023-24657

creationtimestamp| type| source ---|---|--- 2023-03-08 12:23:26+00:00| seen| https://t.me/cibsecurity/59661 2025-03-06 02:16:33+00:00| seen| Telegram/aVs8EmqnfCM8VQjnQB-Gh2RrZP0w1FU3fmMOgkZM8C2mkvi 2025-04-11 06:31:03+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lmjfgdyalj2g...

Avalanche ZDI-CAN-19513 Security Advisory

Last Modified Date Apr 3, 2023 8:41:48 PM...

CVE-2023-0962

creationtimestamp| type| source ---|---|--- 2023-02-23 00:52:10+00:00| seen| https://t.me/cibsecurity/58711 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51291...

CVE-2023-0943

creationtimestamp| type| source ---|---|--- 2023-02-21 22:16:49+00:00| seen| https://t.me/cibsecurity/58636 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51280...

K96639388: Overview of F5 vulnerabilities (April 2021)

Security Advisory Description On April 28th, 2021, F5 announced the following security issues. This document is intended to serve as an overview of these vulnerabilities and security exposures to help determine the impact to your F5 devices. The details of each issue can be found in the associate...

CVE-2022-40032

creationtimestamp| type| source ---|---|--- 2023-02-17 16:13:08+00:00| seen| https://t.me/cibsecurity/58431 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51273...

SUSE CVE-2011-0611

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll aka AuthPlayLib.bundle in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x...

SUSE CVE-2013-2431

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot. NOTE: the previous information is from the...

SUSE CVE-2016-3443

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue...

SUSE CVE-2017-8291

Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile %pipe%" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017...

SUSE CVE-2018-5174

In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEEMASKFLAGNOUI" flag associated with downloaded files and will not show any UI. Files that are unknown and potentially dangerous will be allowed to run because SmartScreen will not prompt the user for a decision, and i...

SUSE CVE-2018-10657

Matrix Synapse before 0.28.1 is prone to a denial of service flaw where malicious events injected with depth = 2^63 - 1 render rooms unusable, related to federation/federationbase.py and handlers/message.py, as exploited in the wild in April 2018...

SUSE CVE-2020-5260

Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. Git uses external "credential helper" programs to store and retrieve passwords or other credentials from secure storage provided by the operating system...