hasznaltguminet.hu Cross Site Scripting vulnerability OBB-3107385

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lullar-com-3.appspot.com Cross Site Scripting vulnerability OBB-3106792

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

farbenfinder.de Cross Site Scripting vulnerability OBB-3106525

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

summerschuesse.ch Cross Site Scripting vulnerability OBB-3106395

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

aluna.webs.uvigo.es Cross Site Scripting vulnerability OBB-3106276

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

yu-chang.com.tw Cross Site Scripting vulnerability OBB-3106127

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

leerjeerfgoed.nl Cross Site Scripting vulnerability OBB-3106044

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vambery.net Cross Site Scripting vulnerability OBB-3105948

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

signature-inc.net Cross Site Scripting vulnerability OBB-3105933

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

m.foroxity.nl Cross Site Scripting vulnerability OBB-3104629

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lyceumevents.org Cross Site Scripting vulnerability OBB-3104623

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-42542

creationtimestamp| type| source ---|---|--- 2022-12-16 18:37:32+00:00| seen| https://t.me/cibsecurity/54731...

CVE-2022-42367

creationtimestamp| type| source ---|---|--- 2022-12-16 18:34:40+00:00| seen| https://t.me/cibsecurity/54724...

CVE-2022-20600

creationtimestamp| type| source ---|---|--- 2022-12-16 18:24:49+00:00| seen| https://t.me/cibsecurity/54687...

morava-net.cz Cross Site Scripting vulnerability OBB-3103837

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Akamai’s Perspective on December’s Patch Tuesday 2022

Every Patch Tuesday stirs up the community. See Akamai's December insights and recommendations on what to focus on, and patch, patch, patch!...

CVE-2022-4525

creationtimestamp| type| source ---|---|--- 2022-12-16 00:23:56+00:00| seen| https://t.me/cibsecurity/54656...

AMI UEFI Firmware December 2022 Security Update (TOCTOU)

A potential Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in certain HP PC products using AMI UEFI Firmware system BIOS which might allow arbitrary code execution, denial of service, and information disclosure. AMI has released updates to mitigate the potential...

hybridsupply.uk Cross Site Scripting vulnerability OBB-3102904

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Citrix ADC and Gateway Zero-Day Vulnerability Exploited by APT5

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Patch Tuesday for December tackles two zero-day vulnerabilities, one of which is being actively exploited CVE-2022-44698 and another that was publicly disclosed at the time of release CVE-2022-44710, alo...