Cisco IP Phones Stored Cross-Site Scripting (CVE-2023-20265)

A vulnerability in the web-based management interface of a small subset of Cisco IP Phones could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation ...

CVE-2024-24867

CVE-2024-24867 affects the WordPress plugin WP Visitor Statistics (Real Time Traffic). Affected software: WP Visitor Statistics (Real Time Traffic) versions up to 6.9.4. The underlying issue is exposure of sensitive information to unauthorized actors via log files. CVSS data indicate a NETWORK at...

CVE-2024-25933

CVE-2024-25933 concerns PeproDev Ultimate Invoice plugin for WordPress. Public details in connected sources indicate unauthenticated exposure of sensitive information via the init_plugin path, affecting PeproDev Ultimate Invoice versions up to 1.9.7. The NVD metrics assign a high base score (7.5)...

CVE-2019-6022

creationtimestamp| type| source ---|---|--- 2024-03-17 09:47:07+00:00| seen| https://t.me/ctinow/209831...

CVE-2019-19910

creationtimestamp| type| source ---|---|--- 2024-03-16 09:22:00+00:00| seen| https://t.me/ctinow/209426...

CVE-2019-5080

creationtimestamp| type| source ---|---|--- 2024-03-16 06:46:24+00:00| seen| https://t.me/ctinow/209362 2025-09-09 09:06:14+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lyfeceklkj52...

CVE-2019-11108

creationtimestamp| type| source ---|---|--- 2024-03-15 14:21:55+00:00| seen| https://t.me/ctinow/208769...

CVE-2023-27502

Intel Local Manageability Service prior to v2316.5.1.2 is affected by CVE-2023-27502, which enables potential information disclosure via local access through log message disclosure. The issue is limited to authenticated Local Manageability Service users and involves sensitive data being written i...

biosensors.com Cross Site Scripting vulnerability OBB-3872311

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cyber Strategy: Don’t Focus on Prevention — Master Resilience

...

farmaonweb.it Cross Site Scripting vulnerability OBB-3871797

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Exploit for Out-of-bounds Write in Fortinet Fortiproxy

CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check Chequea si t...

CVE-2024-2431

CVE-2024-2431 concerns Palo Alto Networks GlobalProtect app. Multiple connected sources confirm a vulnerability where a non-privileged user can disable the GlobalProtect client in configurations that allow disabling with a passcode. The issue affects the GlobalProtect app and has an impact on ava...

GHSA-8G38-3M6V-232J

creationtimestamp| type| source ---|---|--- 2024-03-13 16:46:46+00:00| seen| https://t.me/ctinow/206878...

CVE-2024-0681

The Page Restriction WordPress WP – Protect WP Pages/Post plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 1.3.4. This is due to the plugin not properly restricting access to pages via the REST API when a page has been made private. This makes it...

CVE-2024-0830

The CVE-2024-0830 issue affects the WordPress plugin Comments Extra Fields For Post,Pages and CPT. The vulnerability is a CSRF flaw caused by missing or incorrect nonce validation on several AJAX actions, enabling unauthenticated attackers to trigger those actions by deceiving an admin (e.g., cli...

Information disclosure

IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 255075...

CVE-2015-10123

CVE-2015-10123 is a buffer overflow vulnerability described for WAGO products (notably the WAGO Controller BACnet family and related 750-3xx, 750-8xx devices). The issue arises from a buffer copy without checking input size in the WBM (web-based management) page, which can be triggered by unauthe...

ROS-2-990

2.990 Vulnerability in Mozilla Thunderbird email client CVE-2021-29964, CVE-2021-29967 1. Vulnerability description: CVE-2021-29964 A vulnerability in the Mozilla Thunderbird email client, is related to boundary conditions. Exploitation of the vulnerability could allow an attacker acting remotely...

SUSE SLES15: cluster-md-kmp-azure / dlm-kmp-azure / gfs2-kmp-azure / etc (SUSE-SU-2024:0855-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0855-1 advisory. The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes. The following...