13469 matches found
CVE-2023-47460
CVE-2023-47460 affects Knovos Discovery v.22.67.0. A SQL injection in the endpoint /DiscoveryProcess/Service/Admin.svc/getGridColumnStructure lets a remote attacker execute arbitrary code with high impact (C,H/I,H/A,H) and network attack vector. Public references in Red Hat, NVD, CNNVD, and other...
EDK2 Security Vulnerability
EDK2 is a set of cross-platform firmware development environments from the Tianocore community based on the UEFI and PI specifications. A security vulnerability exists in EDK2 that stems from the Network Package's susceptibility to an out-of-bounds read vulnerability when handling neighbor...
PT-2024-1142
Name of the Vulnerable Software and Affected Versions EDK2 affected versions not specified Description The issue is related to an out-of-bounds read vulnerability when processing Neighbor Discovery Redirect messages in EDK2's Network Package. This can be exploited by an attacker to gain...
gtspirit.gr Improper Access Control vulnerability OBB-3833328
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-28897 Hard-coded password for UDS services
The secret value used for access to critical UDS services of the MIB3 infotainment is hardcoded in the firmware. Vulnerability discovered on Škoda Superb III 3V3 - 2.0 TDI manufactured in 2022...
kanesuzu.co.jp Cross Site Scripting vulnerability OBB-3832874
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
discovery-travel.gr Improper Access Control vulnerability OBB-3832328
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Wallarm Named a Leader in GigaOm Radar for API Security
I am thrilled to share that Wallarm, has been named a leader in the GigaOm Radar for API Security! We would like to share insights from the recent GigaOm 2023 API Security Radar report, particularly shining a spotlight on our Advanced API Security solution. The growing importance of APIs and API...
PHPJabbers Event Booking Calendar 4.0 Cross Site Scripting / HTML Injection
Exploit Title: PHPJabbers Event Booking Calendar v4.0 - Multiple Stored XSS Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/event-booking-calendar/sectionDemo Version: v4.0 Tested o...
PHPJabbers Car Park Booking System 3.0 Missing Rate Limiting
Exploit Title: PHPJabbers Car Park Booking System v3.0 - Missing Rate Limiting Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/car-park-booking/sectionDemo Version: v3.0 Tested on:...
CVE-2024-23060
TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDmzCfg function...
CVE-2023-48676
creationtimestamp| type| source ---|---|--- 2024-01-10 19:46:37+00:00| seen| https://t.me/ctinow/166086...
g4w.de Cross Site Scripting vulnerability OBB-3830831
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
RLSA-2023:7836 Moderate: avahi security update
Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other...
avahi security update
An update is available for avahi. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Avahi is an implementation of the DNS Service Discovery and Multicast DNS...
elysian-estates.co.uk Cross Site Scripting vulnerability OBB-3828507
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Themebleed Windows 11 Themes Arbitrary Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Themebleed- Windows 11 Themes Arbitrary Code Execution CVE-2023-38146', 'Description' = %q When an unpatched Windows 11 host loads a theme file...
Design/Logic Flaw
Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.php/api/install/getdbinfo request, a related issue to CVE-2023-42387...
CVE-2023-44088
creationtimestamp| type| source ---|---|--- 2023-12-29 13:27:00+00:00| seen| https://t.me/ctinow/160498 2023-12-30 01:38:58+00:00| seen| https://t.me/cibsecurity/73953 2024-01-21 13:41:11+00:00| seen| https://t.me/ctinow/170830 2025-04-11 21:02:18+00:00| seen|...
CVE-2023-49230
creationtimestamp| type| source ---|---|--- 2023-12-28 05:26:21+00:00| seen| https://t.me/ctinow/159920 2024-01-04 21:21:54+00:00| seen| https://t.me/ctinow/163221 2024-01-19 18:47:04+00:00| seen| https://t.me/ctinow/170346 2025-07-08 18:24:31+00:00| confirmed|...