huren24.info Cross Site Scripting vulnerability OBB-3423938

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

guide2.info Cross Site Scripting vulnerability OBB-3423343

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-23326 · Systemd +1 · Systemd +1

Name of the Vulnerable Software and Affected Versions: systemd version 253 Description: An issue was discovered where an attacker can truncate a sealed log file and then resume log sealing, allowing modifications to go undetected despite integrity checks showing no error. Recommendations: For...

Zyxel Router Detection - Get Basic Information

Binary data zyxelrouterdetectgetbasicinfo.nbin...

CVE-2023-33695

CVE-2023-33695 affects Hutool Core v5.8.17 and earlier, where FileUtil.createTempFile() stores the temporary file with insecure default permissions, enabling information disclosure. Multiple sources (NVD, Red Hat, GHSA, OSV, Veracode, CNNVD) confirm the vulnerability in /core/io/FileUtil.java. No...

wcl1971.info Cross Site Scripting vulnerability OBB-3420759

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-43778

Potential Time-of-Check to Time-of Use TOCTOU vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure...

Design/Logic Flaw

Atlas Copco Power Focus 6000 web server does not sanitize the login information stored by the authenticated user’s browser, which could allow an attacker with access to the user’s computer to gain credential information of the controller...

CVE-2022-27539

Potential Time-of-Check to Time-of Use TOCTOU vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure...

Information disclosure

Potential Time-of-Check to Time-of Use TOCTOU vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure...

CVE-2022-43778

CVE-2022-43778 describes TOCTOU vulnerabilities in HP BIOS firmware for certain HP PC products that may permit arbitrary code execution, denial of service, and information disclosure. The root cause is a TOCTOU issue in the BIOS timing checks. Impact is high (local attacker, high confidentiality/...

Design/Logic Flaw

AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure, or data tampering...

PT-2023-23667 · Milesight · Milesight Ncr/Camera

Name of the Vulnerable Software and Affected Versions: Milesight NCR/camera version 71.8.0.6-r5 Description: The issue allows authentication bypass through an unspecified method. Recommendations: For Milesight NCR/camera version 71.8.0.6-r5, at the moment, there is no information about a newer...

spravka48.info Cross Site Scripting vulnerability OBB-3411365

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-2085

The CVE-2023-2085 entry concerns the WordPress plugin Essential Blocks (versions up to and including 4.0.6). The vulnerability arises from a missing capability check in the templates function, enabling unauthorized information exposure to subscriber-level users. Although a nonce check exists, it ...

CVE-2023-34566

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter time at /goform/saveParentControlInfo...

CVE-2023-2541

CVE-2023-2541 affects the KNIME Business Hub Web Frontend prior to 1.4.0. The issue allows an unauthenticated remote attacker to access internal application details such as version numbers, host names, and IP addresses. No personal information or application data is exposed. Root cause and exact ...

Tenda AC8 get_parentControl_list_Info function buffer overflow vulnerability

Tenda AC8 is a dual-band Gigabit wireless router from Tenda, designed for fiber optic homes up to 1,000 megabytes, supporting dual-band concurrent transmission rates up to 1,167 Mbps, and equipped with full Gigabit ports 1 WAN port + 3 LAN ports to meet the needs of 100-1,000 megabit broadband...

PT-2023-22172 · Ptc · Vuforia

Name of the Vulnerable Software and Affected Versions: Vuforia affected versions not specified Description: The issue allows an attacker to delete any file with the permissions of the Vuforia server account by changing the filename parameter in the request. Recommendations: At the moment, there i...

Why a proactive detection and incident response plan is crucial for your organization

The security community is continuously changing, growing, and learning from each other to better position the world against cyberthreats. In the latest post of our Community Voices blog series, Microsoft Security Senior Product Marketing Manager Brooke Lynn Weenig talks with Matt Suiche, Director...