jp.zekkeijapan.com Cross Site Scripting vulnerability OBB-3857005

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-24309

The Survey TMA (ecomiz_survey_tma) module for PrestaShop , versions up to 2.0.0 by Ecomiz, contains a design/logic flaw allowing unauthenticated guests to download personal information without restriction. This vulnerability results in the exposure of sensitive information to unauthorized actors....

CVE-2024-25130

CVE-2024-25130 affects Tuleap open source: Community Edition versions prior to 15.5.99.76 and Enterprise Edition prior to 15.5-4 (and 15.4-7) are vulnerable when a tracker’s mass update feature is used. The issue can allow users with read access to a tracker to access restricted information. A pa...

flixta.cc Cross Site Scripting vulnerability OBB-3856035

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-24RP-Q3W6-VC56

creationtimestamp| type| source ---|---|--- 2024-02-22 00:46:22+00:00| seen| https://t.me/ctinow/190263 2024-02-22 12:46:47+00:00| seen| https://t.me/ctinow/190682 2024-02-22 18:57:59+00:00| published-proof-of-concept| https://t.me/arpsyndicate/4002 2025-06-12 16:34:43+00:00|...

CVE-2023-6533

The CVE describes a denial-of-service-like effect on Silicon Labs PC Controller by sending a malformed Device Reset Locally Command Class packet. Affected product: Silicon Labs PC Controller (v5.54.0 and earlier). Root cause: malformed local reset packets cause the controller to mark the end devi...

CVE-2024-1708

creationtimestamp| type| source ---|---|--- 2024-02-21 17:22:10+00:00| seen| https://t.me/ctinow/189797 2024-02-21 17:31:30+00:00| seen| https://t.me/ctinow/189811 2024-02-22 10:40:05+00:00| exploited| https://t.me/truesecator/5446 2024-02-22 10:40:07+00:00| seen|...

Design/Logic Flaw

php-svg-lib is a scalable vector graphics SVG file parsing/rendering library. Prior to version 0.5.2, php-svg-lib fails to validate that font-family doesn't contain a PHAR url, which might leads to RCE on PHP 8.0, and doesn't validate if external references are allowed. This might leads to bypass...

CVE-2024-26138

The CVE concerns the XWiki licensor application, where the Licenses.Code.LicenseJSON document is publicly accessible and exposes admins’ license information, including the instance ID and license owner’s name and email. This data exposure could enable correlation of active installations and targe...

samsmeats.us Cross Site Scripting vulnerability OBB-3855840

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-6787

A flaw was found in Keycloak that occurs from an error in the re-authentication mechanism within org.keycloak.authentication. This flaw allows hijacking an active Keycloak session by triggering a new authentication process with the query parameter "prompt=login," prompting the user to re-enter...

CVE-2023-42946

This vulnerability in Apple products involves an application's ability to leak sensitive user information . The issue was addressed through improved redaction of sensitive information. Affected platforms include tvOS 17.1 , watchOS 10.1 , macOS Sonoma 14.1 , iOS 17.1 , and iPadOS 17.1 . No specif...

CVE-2023-42952

CVE-2023-42952 affects Apple platforms (iOS, iPadOS, macOS) where an app with root privileges may access private information. The issue is addressed with improved checks and is fixed in iOS/iPadOS 17.1, macOS Ventura 13.6.3, macOS Sonoma 14.1, and macOS Monterey 12.7.1. Connected sources also ref...

CVE-2024-1675

Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2019-15451

creationtimestamp| type| source ---|---|--- 2024-02-20 10:46:36+00:00| seen| https://t.me/ctinow/188335...

CVE-2019-15421

creationtimestamp| type| source ---|---|--- 2024-02-20 09:41:21+00:00| seen| https://t.me/ctinow/188257...

CVE-2024-25198

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions are affected by a use-after-free vulnerability in the amcl_node.cpp file. The root cause is an inappropriate pointer order during the execution of laser_scan_filter_.reset() and tf_listener_.reset(). To remediate this, it is...

HPESBMU04599 rev.1 - HPE IceWall products, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE IceWall Federation - 4.0 RHEL 8 and Windows - SAML IdP, Office 365 module, OIDC RP and OIDC OP. IceWall Gen11 Password Reset Option - 11.0 RHEL 8 and Windows IceWall...

CVE-2024-23758

A security vulnerability exists in Unisys Stealth version 5.3.062.0 , a zero-trust security software. The flaw allows an attacker to view sensitive information by accessing the Enterprise ManagementInstaller_msi.log file. To minimize the risk of exploitation, it is recommended to restrict access ...

CVE-2024-1633

CVE-2024-1633 is a bootloader issue in bl2 where reading image length/destination from each image certificate uses a 32-bit unsigned value, causing an integer overflow. This can bypass memory range checks and write data outside buffers, potentially bypassing secure boot. Affected component: bl2 (...