dneprovez.by Cross Site Scripting vulnerability OBB-3102624

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kawano.18girl.club Cross Site Scripting vulnerability OBB-3102516

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

saimi.18girl.club Cross Site Scripting vulnerability OBB-3102468

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sorano.18girl.club Cross Site Scripting vulnerability OBB-3102310

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

classicroofingmuskoka.ca Cross Site Scripting vulnerability OBB-3102101

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

boutiquepointdevue.ca Cross Site Scripting vulnerability OBB-3101993

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Updates for Microsoft ASP.NET Core (December 2022)

A remote code execution vulnerability exists in ASP.NET core 3.1, ASP.NET 6.0, and ASP.NET 7.0, where a malicious actor could cause a user to run arbitrary code as a result of parsing maliciously crafted xps files. Note that Nessus has not tested for this issue but has instead relied only on the...

Security Updates for Microsoft .NET Framework (December 2022)

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in the handling of XPS files. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted fr...

Security Update for .NET Core SDK (December 2022)

The Microsoft .NET Core SDK installation on the remote host is version affected by a remote code execution vulnerability when parsing maliciously crafted xps files. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

kronas.com.ua Cross Site Scripting vulnerability OBB-3101374

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kaldor-army.co.uk Cross Site Scripting vulnerability OBB-3101366

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

idun-nature.com Cross Site Scripting vulnerability OBB-3101350

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-46121

creationtimestamp| type| source ---|---|--- 2022-12-14 20:23:24+00:00| seen| https://t.me/cibsecurity/54545 2025-04-22 14:03:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12852...

CVE-2022-31702

creationtimestamp| type| source ---|---|--- 2022-12-14 08:14:08+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus27/2022 2022-12-14 22:22:56+00:00| seen| https://t.me/cibsecurity/54554...

photokina.ma Cross Site Scripting vulnerability OBB-3100353

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

jako.edu.vn Cross Site Scripting vulnerability OBB-3100179

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Updates for Microsoft Dynamics 365 Business Central (December 2022)

The Microsoft Dynamics 365 Business Central install is missing a security update. It is, therefore, affected by an remote code execution vulnerability. A remote attacker with admin privileges can exploit this vulnerability to execute malicious instructions on their behalf. Note that Nessus has no...

The December 2022 Patch Tuesday Security Update Review

Welcome to the final second Tuesday of the year. As expected, Microsoft and Adobe have released their latest security updates and fixes. Take a break from your holiday preparations and join us as we review the details of the latest security patches. Microsoft Patches for December 2022 In this...

CVE-2022-44707

creationtimestamp| type| source ---|---|--- 2022-12-13 22:27:57+00:00| seen| https://t.me/cibsecurity/54454 2023-02-01 13:27:00+00:00| published-proof-of-concept| Telegram/mb6gLoV0NfkmuOkTf3XpsbGOObKIjUlOADh0OzmPtQ0mi4...

Patch Tuesday - December 2022

As far as Patch Tuesdays go, defenders have a relatively light month to close out the year with only 48 CVEs being published by Microsoft today. This does not include the 24 previously disclosed vulnerabilities affecting their Chromium-based Edge browser. There are two zero-days in the mix today...