CVE-2023-52175

CVE-2023-52175 affects the WordPress Auto Amazon Links – Amazon Associates Affiliate Plugin up through version 5.1.1. Root cause: improper neutralization of input during web page generation, enabling stored XSS. A fix is available in 5.1.2; update to a version later than 5.1.1 to mitigate. Patchs...

sherman-associates.com Cross Site Scripting vulnerability OBB-3836201

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-6376

Henschen & Associates court document management software does not sufficiently randomize file names of cached documents, allowing a remote, unauthenticated attacker to access restricted documents...

CVE-2023-6376

Henschen & Associates court document management software does not sufficiently randomize file names of cached documents, allowing a remote, unauthenticated attacker to access restricted documents...

CVE-2023-6376

CVE-2023-6376 affects Henschen & Associates court document management software. The root cause is insufficient randomization of cached document filenames, enabling a remote, unauthenticated attacker to access restricted documents by predicting cache paths. Exploitation details beyond this are not...

CVE-2023-6376 Henschen & Associates court document management software cache uses predictable file names

Henschen & Associates court document management software does not sufficiently randomize file names of cached documents, allowing a remote, unauthenticated attacker to access restricted documents...

Henschen & Associates court document management software Security Feature Issue Vulnerability

Henschen & Associates court document management software is a court document management software from Henschen & Associates. A security vulnerability exists in Henschen & Associates court document management software, which arises from insufficient randomization of the filenames of cached...

WordPress Affiliate Link Builder Plugin for Amazon Associates – Review Engine Plugin <= 1.0.41 is vulnerable to Cross Site Scripting (XSS)

Software Affiliate Link Builder Plugin for Amazon Associates – Review Engine Type Plugin Vulnerable versions = 1.0.41 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...

michiganneurologyassociates.com Cross Site Scripting vulnerability OBB-3213229

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

K8174: F5 VPN Client for Windows is remotely exploitable through a buffer overflow

Security Advisory Description Note : For information about signing up to receive security notice updates from F5, refer to K9970: Subscribe to email notifications regarding F5 products and security announcements. Note : Versions that are not listed in this Solution have not been evaluated for...

austinentassociates.com Cross Site Scripting vulnerability OBB-3119359

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

associates-obgyn.com Cross Site Scripting vulnerability OBB-3118756

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Microsoft Defender Experts for Hunting proactively hunts threats

Today, we announced the general availability of Microsoft Defender Experts for Hunting to support organizations and their cybersecurity employees with proactive threat hunting. Defender Experts for Hunting was created for customers who have a robust security operations center but want Microsoft t...

blakemanandassociates.com Cross Site Scripting vulnerability OBB-2778202

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Lumidek Associates Simple Food Website Cross-Site Request Forgery Vulnerability

Lumidek Associates Simple Food Website is a Simple Food Website CMS. version 1.0 of Lumidek Associates Simple Food Website is vulnerable to cross-site request forgery, which stems from a WEB application that does not adequately validate that the request is from a trusted user. An attacker could...

CVE-2022-30014

Lumidek Associates Simple Food Website 1.0 is vulnerable to Cross Site Request Forgery CSRF which allows anyone to takeover admin/moderater account...

Cross site request forgery (csrf)

Lumidek Associates Simple Food Website 1.0 is vulnerable to Cross Site Request Forgery CSRF which allows anyone to takeover admin/moderater account...

CVE-2022-30014

Lumidek Associates Simple Food Website 1.0 is vulnerable to Cross Site Request Forgery CSRF which allows anyone to takeover admin/moderater account...

CVE-2022-30014

CVE-2022-30014 affects Lumidek Associates Simple Food Website 1.0. The vulnerability is a Cross Site Request Forgery (CSRF) that can allow an attacker to take over the administrator/moderator account because the web application does not adequately validate requests from a trusted user. Root cause...

princetonendocrinologyassociates.com Cross Site Scripting vulnerability OBB-2619975

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...