msLDAPDump - LDAP Enumeration Tool

msLDAPDump simplifies LDAP enumeration in a domain environment by wrapping the lpap3 library from Python in an easy-to-use interface. Like most of my tools, this one works best on Windows. If using Unix, the tool will not resolve hostnames that are not accessible via eth0 currently. Binding...

CVE-2023-32417

creationtimestamp| type| source ---|---|--- 2023-06-23 22:39:45+00:00| seen| https://t.me/cibsecurity/65483...

guide2.info Cross Site Scripting vulnerability OBB-3460569

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-36239

libming listswf 0.4.7 was discovered to contain a buffer overflow in the parseSWFDEFINEFONTINFO function at parser.c...

Internet Printing Protocol (IPP) Detection

Detection of services supporting the Internet Printing Protocol IPP. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache Tomcat vulnerable to information leak

A regression in the fix for bug 66512 in Apache Tomcat 11.0.0-M5, 10.1.8, 9.0.74 and 8.5.88 meant that, if a response did not include any HTTP headers no AJP SENDHEADERS message would be sent for the response which in turn meant that at least one AJP proxy modproxyajp would use the response heade...

IBM Security Directory Suite VA Information Disclosure Vulnerability (CNVD-2023-51455)

IBM Security Directory Suite is a scalable, standards-based identity platform from International Business Machines IBM that simplifies identity and directory management. An information disclosure vulnerability exists in IBM Security Directory Suite VA, which can be exploited by an attacker to...

CVE-2020-20067

creationtimestamp| type| source ---|---|--- 2023-06-20 18:25:25+00:00| seen| https://t.me/cibsecurity/65363...

PT-2023-35876

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions, including dwarf exec frame instr, dwarf get fde info for ...

CVE-2023-32276

CVE-2023-32276 describes a stack-based buffer overflow in Fuji Electric TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. The root cause is improper validation of input length when processing a V8 file, which can lead to information disclosure and/or arbitrary code execution. The vulnerability affects ...

PT-2023-25342 · Virtualsquare · Virtualsquare Picotcp

Name of the Vulnerable Software and Affected Versions: VirtualSquare picoTCP aka PicoTCP-NG versions 2.1 and earlier Description: The issue arises from improper checking of header sizes, which could lead to accessing data outside of a packet. Recommendations: For VirtualSquare picoTCP aka...

CVE-2022-48495

CVE-2022-48495 is described as a vulnerability allowing unauthorized access to foreground app information, with potential of obtaining such information if exploited. The primary technical context in the provided documents centers on Huawei HarmonyOS as the involved ecosystem, noting the vulnerabi...

veterina-info.cz Cross Site Scripting vulnerability OBB-3441574

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

oai.normannia.info Cross Site Scripting vulnerability OBB-3440727

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

iknews.info Cross Site Scripting vulnerability OBB-3438479

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-15806 · Huawei · Huawei Printer

Name of the Vulnerable Software and Affected Versions: Huawei Printer affected versions not specified Description: The issue is related to a misinterpretation of input in the Huawei Printer, which can lead to abnormal printer service upon successful exploitation. Recommendations: At the moment,...

Information disclosure

In multiple files, there is a possible way to access traces in the dev mode due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12...

info-endometriose.fr Cross Site Scripting vulnerability OBB-3433384

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-29287

Adobe Commerce/Magento suffers an Information Disclosure vulnerability that can bypass a security feature and leak minor user data without user interaction. Affects: Adobe Commerce/Magento 2.4.6 and earlier (including 2.4.5-p2, 2.4.4-p3). Root cause: Information exposure enabling limited data lea...

PT-2023-17899 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue is related to a confused deputy in multiple functions of ChooserActivity.java, which could lead to a cross-user media read. This might result in local information disclosur...