2646 matches found
cgwallpapers.com Cross Site Scripting vulnerability OBB-3952840
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-7256
creationtimestamp| type| source ---|---|--- 2024-08-01 21:16:49+00:00| seen| https://t.me/cvedetector/2259 2024-08-05 16:02:01+00:00| published-proof-of-concept| https://t.me/MrVGunz/1232 2024-08-05 16:54:08+00:00| published-proof-of-concept| https://t.me/MrVGunz/1233 2024-08-13 18:05:01+00:00|...
unread.today Cross Site Scripting vulnerability OBB-3952583
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress Filter & Grids Plugin <= 2.8.33 is vulnerable to Broken Authentication
Software Filter & Grids Type Plugin Vulnerable versions = 2.8.33 Fixed in 2.8.34 OWASP Top 10 A1: Broken Access Control Classification Broken Authentication CVE CVE-2024-39664 Patch priority High CVSS severity High 7.3 Developer Claim ownership PSID bac0e0da8bce Credits RE-ALTER Required privileg...
WordPress Tutor LMS Plugin <= 2.7.2 is vulnerable to Cross Site Request Forgery (CSRF)
Software Tutor LMS Type Plugin Vulnerable versions = 2.7.2 Fixed in 2.7.3 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-39645 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID dcc37aabdfcd Credits Rafie Muhammad Patchstack...
CVE-2024-6990
creationtimestamp| type| source ---|---|--- 2024-07-31 10:57:48+00:00| seen| https://t.me/HackingInsights/8026 2024-08-01 21:16:48+00:00| seen| https://t.me/cvedetector/2258 2024-08-05 16:02:01+00:00| published-proof-of-concept| https://t.me/MrVGunz/1232 2024-08-05 16:54:08+00:00|...
CVE-2024-41043
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkqueue: drop bogus WARNON Happens when rules get flushed/deleted while packet is out, so remove this WARNON. This WARN exists in one form or another since v4.14, no need to backport this to older releases, henc...
CISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities List
The U.S. Cybersecurity and Infrastructure Security Agency CISA has added two security flaws to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerabilities are listed below - CVE-2012-4792 CVSS score: 9.3 - Microsoft Internet Explorer Use-After-Fr...
Android Automotive OS Update Bulletin—August 2024Stay organized with collectionsSave and categorize content based on your preferences.
The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2024-08-05 or later from the August 2024 Android Security Bulletin in addition to all issues in this...
CVE-2023-45196
Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with HTTP redirects. The denial of service is subject to PHP configuration limits. Adminer is no longer supported, but this issue was fixed in...
May 23, 2024—KB5039705 (OS Build 17763.5830) Out-of-band - EXPIRED
None None...
CVE-2024-2771
creationtimestamp| type| source ---|---|--- 2024-05-21 15:30:04+00:00| seen| https://t.me/HackingInsights/727 2025-08-03 09:00:06+00:00| published-proof-of-concept| Telegram/k9l6whAFym9ZbJh5WMNbuyJuC8dcnnMOMGxizovh2wCYo8 2025-08-05 21:02:20+00:00| seen|...
CVE-2023-44428
MuseScore CAP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MuseScore. User interaction is required to exploit this vulnerability in that the target must visit a...
ecovaluecoin.com Cross Site Scripting vulnerability OBB-3918601
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-31864
creationtimestamp| type| source ---|---|--- 2024-04-13 00:29:02+00:00| seen| https://t.me/arpsyndicate/4610 2025-08-03 10:45:41+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lviiseg7vlq2 2025-08-03 14:03:12+00:00| seen|...
CVE-2024-31101
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in August Infotech AI Twitter Feeds Twitter widget & shortcode allows Stored XSS.This issue affects AI Twitter Feeds Twitter widget & shortcode: from n/a through 2.4...
CVE-2024-31101
CVE-2024-31101 is an stored XSS in the AI Twitter Feeds WordPress plugin (Twitter widget & shortcode) affecting versions up to 2.4. The issue is described as improper neutralization during web page generation. Public data from Patchstack/NVD indicates CVSSv3.1 base score 6.5 (MEDIUM), with attack...
CVE-2024-31101 WordPress AI Twitter Feeds (Twitter widget & shortcode) plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in August Infotech AI Twitter Feeds Twitter widget & shortcode allows Stored XSS.This issue affects AI Twitter Feeds Twitter widget & shortcode: from n/a through 2.4...
PT-2024-23770 · August Infotech · August Infotech Ai Twitter Feeds
Name of the Vulnerable Software and Affected Versions: August Infotech AI Twitter Feeds Twitter widget & shortcode versions n/a through 2.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored...