vanesse.be Cross Site Scripting vulnerability OBB-3851780

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Hackers Leak Alleged Partial Facebook Marketplace Database

By Waqas The alleged data breach took place on October 2023. However, the database was only made public earlier today, on Sunday, February 11, 2024. This is a post from HackRead.com Read the original post: Hackers Leak Alleged Partial Facebook Marketplace Database...

CVE-2024-25741

creationtimestamp| type| source ---|---|--- 2024-02-12 04:26:18+00:00| seen| https://t.me/ctinow/182890 2024-02-15 06:26:38+00:00| seen| https://t.me/ctinow/185256...

WordPress ImageRecycle pdf & image compression Plugin <= 3.1.13 is vulnerable to Broken Access Control

Software ImageRecycle pdf & image compression Type Plugin Vulnerable versions = 3.1.13 Fixed in 3.1.14 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-0984 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 35a4c2f10086 Credits Frances...

WordPress ImageRecycle pdf & image compression Plugin <= 3.1.13 is vulnerable to Cross Site Request Forgery (CSRF)

Software ImageRecycle pdf & image compression Type Plugin Vulnerable versions = 3.1.13 Fixed in 3.1.14 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-1335 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 78d30d4717e8 Credi...

WordPress Canto Plugin <= 3.0.6 is vulnerable to Remote Code Execution (RCE)

Software Canto Type Plugin Vulnerable versions = 3.0.6 Fixed in 3.0.7 OWASP Top 10 A3: Injection Classification Remote Code Execution RCE CVE CVE-2024-25096 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 5a102fd4265b Credits Rodrigo Escobar ipax Required privilege...

WordPress Malware Scanner Plugin <= 4.7.2 is vulnerable to SQL Injection

Software Malware Scanner Type Plugin Vulnerable versions = 4.7.2 Fixed in 4.7.3 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-25902 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 46c75a59070d Credits Le Ngoc Anh Required privilege Administrator...

CVE-2024-22505

creationtimestamp| type| source ---|---|--- 2024-02-11 15:53:39+00:00| seen| https://t.me/arpsyndicate/3432...

CVE-2024-23118

creationtimestamp| type| source ---|---|--- 2024-02-11 15:16:15+00:00| seen| https://t.me/arpsyndicate/3420...

teddypayet.com Cross Site Scripting vulnerability OBB-3851566

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

naraiproperty.com Cross Site Scripting vulnerability OBB-3851537

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-23116

creationtimestamp| type| source ---|---|--- 2024-02-11 13:06:36+00:00| seen| https://t.me/arpsyndicate/3378...

stccmop.org Cross Site Scripting vulnerability OBB-3851503

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

foodsdictionary.com Cross Site Scripting vulnerability OBB-3851470

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2019-14860

creationtimestamp| type| source ---|---|--- 2024-02-11 08:37:06+00:00| seen| https://t.me/ctinow/182713...

CVE-2023-52428

creationtimestamp| type| source ---|---|--- 2024-02-11 06:26:49+00:00| seen| https://t.me/ctinow/182691...

CVE-2023-52427

creationtimestamp| type| source ---|---|--- 2024-02-11 05:21:32+00:00| seen| https://t.me/ctinow/182687 2024-02-13 02:16:41+00:00| seen| https://t.me/ctinow/183556 2024-03-03 13:47:01+00:00| seen| https://t.me/ctinow/198727...

CVE-2024-23724

creationtimestamp| type| source ---|---|--- 2024-02-11 02:21:54+00:00| seen| https://t.me/ctinow/182676 2024-02-13 02:25:36+00:00| seen| https://t.me/arpsyndicate/3521 2024-02-21 16:23:17+00:00| published-proof-of-concept| https://t.me/poxek/3708 2024-02-21 17:57:20+00:00|...

CVE-2023-5097

creationtimestamp| type| source ---|---|--- 2024-02-10 15:46:12+00:00| seen| https://t.me/ctinow/182581...

glowm.com Cross Site Scripting vulnerability OBB-3851324

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...