PT-2024-12: SQL Injection in Cacti

The vulnerability was identified in Cacti version 1.2.25 and below. It allows to execute arbitrary SQL code. The vulnerability can be exploited by an authorized user using the vulnerable component pollers.php. Vulnerability status: Confirmed by vendor Date of vulnerability detection: 22.12.2023...

PT-2024-11: Local file Inclusion in Cacti

The vulnerability was identified in Cacti version 1.2.25 and below. It leads to the possibility of executing arbitrary code on the server. The vulnerability can be exploited by an authorized user using SQL injection and due to insufficient processing of the path to the included file. Vulnerabilit...

CVE-2023-6655

creationtimestamp| type| source ---|---|--- 2023-12-19 10:42:33+00:00| seen| https://t.me/ctinow/156321 2025-10-16 18:14:17+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-6655.yaml 2025-10-19 21:02:29+00:00| seen|...

discountedtvremotes.com Improper Access Control vulnerability OBB-3797401

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2025-41079

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter conntrack component where the timeout value of an unconfirmed conntrack is handled incorrectly. When setting the timeout via the ctnetlink change timeout...

CVE-2023-3277

creationtimestamp| type| source ---|---|--- 2023-11-03 15:23:19+00:00| seen| https://t.me/cibsecurity/73514 2025-11-30 01:24:18+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-3277.yaml 2025-12-01 21:02:36+00:00| seen|...

pbf.tax Cross Site Scripting vulnerability OBB-3763670

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-45826

creationtimestamp| type| source ---|---|--- 2023-10-19 22:34:49+00:00| seen| https://t.me/cibsecurity/72608 2025-02-25 08:31:44+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-45826.yaml 2025-02-26 21:02:01+00:00| seen|...

CVE-2023-4666

creationtimestamp| type| source ---|---|--- 2023-10-17 00:32:14+00:00| seen| https://t.me/cibsecurity/72347 2025-01-31 21:40:22+00:00| seen| Telegram/KQt3AsBMUv9rm4uNMEtvLFjsfOosJKxmDQL0jQWpInK2LtGCng 2025-04-07 11:02:22+00:00| published-proof-of-concept| https://t.me/Idi0tSecMarket/21 2025-09-24...

whyville.net Cross Site Scripting vulnerability OBB-3751162

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-3169

creationtimestamp| type| source ---|---|--- 2023-10-10 11:36:55+00:00| exploited| https://t.me/itsecnews/3432 2023-10-11 15:16:39+00:00| exploited| https://t.me/KomunitiSiber/919 2023-10-11 15:30:02+00:00| seen| Telegram/ReJUj7XL5RTCHl48Ln6hOhYIjbpjNlCtusbs47L9aTPiow 2025-09-23 20:09:27+00:00|...

hochrieder.at Cross Site Scripting vulnerability OBB-3695662

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-45811

creationtimestamp| type| source ---|---|--- 2023-09-08 07:19:20+00:00| seen| https://t.me/cibsecurity/70128 2024-10-10 12:04:27+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-45811.yaml...

demo.openeclass.org Cross Site Scripting vulnerability OBB-3654263

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

randalphammd.com Cross Site Scripting vulnerability OBB-3653476

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

papuzze.it Cross Site Scripting vulnerability OBB-3650654

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

begniscatering.gr Cross Site Scripting vulnerability OBB-3575340

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-4136

creationtimestamp| type| source ---|---|--- 2023-08-03 18:40:02+00:00| seen| https://t.me/cibsecurity/67683 2025-06-02 16:52:14+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-4136.yaml 2025-06-04 21:02:24+00:00| seen|...

CVE-2023-3990

creationtimestamp| type| source ---|---|--- 2023-07-28 12:29:15+00:00| seen| https://t.me/cibsecurity/67359 2024-12-05 13:57:04+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-3990.yaml...

vbm.kulturhotell.se Cross Site Scripting vulnerability OBB-3536996

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...