CVE-2024-20744

creationtimestamp| type| source ---|---|--- 2024-02-15 12:26:19+00:00| seen| https://t.me/ctinow/185457 2024-03-06 08:41:47+00:00| seen| https://t.me/ctinow/201116...

CVE-2024-20724

creationtimestamp| type| source ---|---|--- 2024-02-15 12:26:12+00:00| seen| https://t.me/ctinow/185451 2024-03-06 08:41:49+00:00| seen| https://t.me/ctinow/201118...

fenixlight.com Cross Site Scripting vulnerability OBB-3852874

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress postMash – custom post order Plugin <= 1.2.0 is vulnerable to SQL Injection

Software postMash – custom post order Type Plugin Vulnerable versions = 1.2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-25927 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID 5131e79f3c3e Credits Dimas Maulana Required privilege...

Microsoft Security Update Validation Report February 2024

Microsoft’s February 2024 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...

abcearlyyears.org.uk Cross Site Scripting vulnerability OBB-3852768

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-0011

creationtimestamp| type| source ---|---|--- 2024-02-14 19:26:32+00:00| seen| https://t.me/ctinow/184937 2024-03-06 18:22:11+00:00| seen| https://t.me/ctinow/201614...

promix.com.br Cross Site Scripting vulnerability OBB-3852747

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-52396

creationtimestamp| type| source ---|---|--- 2024-02-14 18:27:28+00:00| seen| https://t.me/ctinow/184895...

paroledemamans.com Cross Site Scripting vulnerability OBB-3852722

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-44294

creationtimestamp| type| source ---|---|--- 2024-02-14 16:51:51+00:00| seen| https://t.me/ctinow/184791 2024-03-06 09:36:58+00:00| seen| https://t.me/ctinow/201147...

CVE-2023-44293

creationtimestamp| type| source ---|---|--- 2024-02-14 16:51:50+00:00| seen| https://t.me/ctinow/184790 2024-03-06 09:36:57+00:00| seen| https://t.me/ctinow/201146...

K000138353: Quarterly Security Notification (February 2024)

Security Advisory Description On February 14, 2024, F5 announced the following security issues. This document is intended to serve as an overview of these vulnerabilities and security exposures to help determine the impact to your F5 devices. You can find the details of each issue in the associat...

thespacefriends.com Cross Site Scripting vulnerability OBB-3852567

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kanazawabiyori.com Cross Site Scripting vulnerability OBB-3852542

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2019-0143

creationtimestamp| type| source ---|---|--- 2024-02-14 09:56:36+00:00| seen| https://t.me/ctinow/184508...

DarkMe Malware Targets Traders Using Microsoft SmartScreen Zero-Day Vulnerability

A newly disclosed security flaw in the Microsoft Defender SmartScreen has been exploited as a zero-day by an advanced persistent threat actor called Water Hydra aka DarkCasino targeting financial market traders. Trend Micro, which began tracking the campaign in late December 2023, said it entails...

WordPress Paid Member Subscriptions Plugin <= 2.11.1 is vulnerable to Broken Access Control

Software Paid Member Subscriptions Type Plugin Vulnerable versions = 2.11.1 Fixed in 2.11.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1390 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6361d41c5a14 Credits Lucio Sá Required...

Security Updates for Microsoft Office Products C2R (February 2024)

The Microsoft Office Products are missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows: - A remote code execution vulnerability. CVE-2024-21413 - A remote code execution vulnerability. CVE-2024-20673 Note that Nessus has not tested for these issues but has...

WordPress WP Setup Wizard Plugin <= 1.0.8.1 is vulnerable to Sensitive Data Exposure

Software WP Setup Wizard Type Plugin Vulnerable versions = 1.0.8.1 Fixed in 1.0.8.2 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-25917 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 5a05aed5e6cb Credits Dave Jong Patchstack...