13476 matches found
RLSA-2023:7836 Moderate: avahi security update
Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other...
avahi security update
An update is available for avahi. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Avahi is an implementation of the DNS Service Discovery and Multicast DNS...
elysian-estates.co.uk Cross Site Scripting vulnerability OBB-3828507
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Themebleed Windows 11 Themes Arbitrary Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Themebleed- Windows 11 Themes Arbitrary Code Execution CVE-2023-38146', 'Description' = %q When an unpatched Windows 11 host loads a theme file...
Design/Logic Flaw
Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.php/api/install/getdbinfo request, a related issue to CVE-2023-42387...
CVE-2023-44088
creationtimestamp| type| source ---|---|--- 2023-12-29 13:27:00+00:00| seen| https://t.me/ctinow/160498 2023-12-30 01:38:58+00:00| seen| https://t.me/cibsecurity/73953 2024-01-21 13:41:11+00:00| seen| https://t.me/ctinow/170830 2025-04-11 21:02:18+00:00| seen|...
CVE-2023-49230
creationtimestamp| type| source ---|---|--- 2023-12-28 05:26:21+00:00| seen| https://t.me/ctinow/159920 2024-01-04 21:21:54+00:00| seen| https://t.me/ctinow/163221 2024-01-19 18:47:04+00:00| seen| https://t.me/ctinow/170346 2025-07-08 18:24:31+00:00| confirmed|...
ausblick.ezwaiver.com Cross Site Scripting vulnerability OBB-3822965
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
zooshoprobby.de Improper Access Control vulnerability OBB-3820671
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
zfpcba.com Cross Site Scripting vulnerability OBB-3819548
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Vinchin Backup And Recovery Command Injection
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Vinchin Backup and Recovery Command Injection', 'Description' = %q This module exploits a command injection vulnerability in Vinchin Backup &...
Vinchin Backup And Recovery Command Injection Exploit
This Metasploit module exploits a command injection vulnerability in Vinchin Backup & Recovery v5.0., v6.0., v6.7., and v7.0.. Due to insufficient input validation in the checkIpExists API endpoint, an attacker can execute arbitrary commands as the web server user. This module requires Metasploit...
CVE-2023-49272
creationtimestamp| type| source ---|---|--- 2023-12-20 21:23:59+00:00| seen| https://t.me/ctinow/157317 2024-01-14 07:11:56+00:00| seen| https://t.me/ctinow/167944...
Operations Bridge Report - Windows - Discovery Plugin
Binary data microfocusoperationsbridgereporterwindiscovery.nbin...
Operations Bridge Report - Linux - Discovery Plugin
Binary data microfocusoperationsbridgereporternixdiscovery.nbin...
CVE-2023-6228
An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash...
QakBot Malware Resurfaces with New Tactics, Targeting the Hospitality Industry
A new wave of phishing messages distributing the QakBot malware has been observed, more than three months after a law enforcement effort saw its infrastructure dismantled by infiltrating its command-and-control C2 network. Microsoft, which made the discovery, described it as a low-volume campaign...
webcam-map.com Improper Access Control vulnerability OBB-3815584
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
kalendare-a-diare.cz Improper Access Control vulnerability OBB-3814814
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-48379
Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter within a specific function. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response...