2812 matches found
CVE-2023-49680
creationtimestamp| type| source ---|---|--- 2023-12-22 00:22:22+00:00| seen| https://t.me/ctinow/158074 2023-12-27 23:17:17+00:00| seen| https://t.me/ctinow/159820...
CVE-2023-48689
creationtimestamp| type| source ---|---|--- 2023-12-21 22:27:23+00:00| seen| https://t.me/ctinow/158002 2023-12-29 17:17:09+00:00| seen| https://t.me/ctinow/160605...
CVE-2023-7040
creationtimestamp| type| source ---|---|--- 2023-12-21 21:21:58+00:00| seen| https://t.me/ctinow/157960 2023-12-30 08:16:30+00:00| seen| https://t.me/ctinow/160799 2024-01-14 09:36:41+00:00| seen| https://t.me/ctinow/167978...
CVE-2023-48810
creationtimestamp| type| source ---|---|--- 2023-12-21 14:42:42+00:00| seen| https://t.me/ctinow/157719...
mathistonflorist.com Cross Site Scripting vulnerability OBB-3819586
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
blackfinboats.com Cross Site Scripting vulnerability OBB-3819558
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
anniefalk.com Cross Site Scripting vulnerability OBB-3819553
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
princesspurse.com Cross Site Scripting vulnerability OBB-3819514
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
eventinspiration.nl Cross Site Scripting vulnerability OBB-3819451
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
bodegasreyesmagos.es Improper Access Control vulnerability OBB-3819381
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
newquaypropertycentre.co.uk Improper Access Control vulnerability OBB-3819310
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-46131
creationtimestamp| type| source ---|---|--- 2023-12-21 01:23:55+00:00| seen| https://t.me/ctinow/157440 2024-01-14 09:07:09+00:00| seen| https://t.me/ctinow/167967...
WordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.5 is vulnerable to SQL Injection
Software NEX-Forms – Ultimate Form Builder Type Plugin Vulnerable versions = 8.5.5 Fixed in 8.5.6 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50838 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 3121cd44ed44 Credits Khalid Yusuf Required privilege...
WordPress Paid Memberships Pro Plugin <= 2.12.5 is vulnerable to Broken Access Control
Software Paid Memberships Pro Type Plugin Vulnerable versions = 2.12.5 Fixed in 2.12.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-6855 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID fb6688b14c42 Credits Webbernaut Required...
WordPress Uncode Core Plugin <= 2.8.8 is vulnerable to Arbitrary File Deletion
Software Uncode Core Type Plugin Vulnerable versions = 2.8.8 Fixed in 2.8.9 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2023-51500 Patch priority High CVSS severity High 7.7 Developer Claim ownership PSID db4f1f58fbde Credits Rafie Muhammad Patchstack...
WordPress RegistrationMagic Plugin <= 5.2.4.5 is vulnerable to SQL Injection
Software RegistrationMagic Type Plugin Vulnerable versions = 5.2.4.5 Fixed in 5.2.4.6 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50846 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 9ebe43b2d455 Credits Muhammad Daffa Required privilege...
WordPress Clockwork SMS Notfications Plugin <= 3.0.4 is vulnerable to SQL Injection
Software Clockwork SMS Notfications Type Plugin Vulnerable versions = 3.0.4 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50843 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 56466c20b5e4 Credits Mika Required privilege Administrator...
Security Bulletin: Multiple vulnerabilities in open source libraries affect IBM® Db2® Federated.
Summary Multiple vulnerabilities in open source libraries affect IBM® Db2® Federated. These vulnerabilities were fixed in the images published on December 01, 2023 but the CVEs were not included in the bulletin. Vulnerability Details CVEID:CVE-2022-1471 DESCRIPTION: SnakeYaml could allow a remote...
CVE-2023-6071
creationtimestamp| type| source ---|---|--- 2023-12-20 18:51:54+00:00| seen| https://t.me/ctinow/157219...
lv-mittweida.de Improper Access Control vulnerability OBB-3819285
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...