biosensors.com Cross Site Scripting vulnerability OBB-3872311

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cyber Strategy: Don’t Focus on Prevention — Master Resilience

...

farmaonweb.it Cross Site Scripting vulnerability OBB-3871797

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Exploit for Out-of-bounds Write in Fortinet Fortiproxy

CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check Chequea si t...

CVE-2024-2431

CVE-2024-2431 concerns Palo Alto Networks GlobalProtect app. Multiple connected sources confirm a vulnerability where a non-privileged user can disable the GlobalProtect client in configurations that allow disabling with a passcode. The issue affects the GlobalProtect app and has an impact on ava...

GHSA-8G38-3M6V-232J

creationtimestamp| type| source ---|---|--- 2024-03-13 16:46:46+00:00| seen| https://t.me/ctinow/206878...

CVE-2024-0681

The Page Restriction WordPress WP – Protect WP Pages/Post plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 1.3.4. This is due to the plugin not properly restricting access to pages via the REST API when a page has been made private. This makes it...

CVE-2024-0830

The CVE-2024-0830 issue affects the WordPress plugin Comments Extra Fields For Post,Pages and CPT. The vulnerability is a CSRF flaw caused by missing or incorrect nonce validation on several AJAX actions, enabling unauthenticated attackers to trigger those actions by deceiving an admin (e.g., cli...

Information disclosure

IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 255075...

CVE-2015-10123

CVE-2015-10123 is a buffer overflow vulnerability described for WAGO products (notably the WAGO Controller BACnet family and related 750-3xx, 750-8xx devices). The issue arises from a buffer copy without checking input size in the WBM (web-based management) page, which can be triggered by unauthe...

SUSE SLES15: cluster-md-kmp-azure / dlm-kmp-azure / gfs2-kmp-azure / etc (SUSE-SU-2024:0855-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0855-1 advisory. The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes. The following...

MSMS-PHP 1.0 SQL Injection

Title: MSMS-PHP by: oretnom23 v1.0 Multiple-SQLi Author: nu11secur1ty Date: 03/13/2024 Vendor: https://github.com/oretnom23 Software: https://www.sourcecodester.com/php/14924/online-mobile-store-management-system-using-php-free-source-code.html Reference:...

ROS-2-995

2.995 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...

ROS-2-990

2.990 Vulnerability in Mozilla Thunderbird email client CVE-2021-29964, CVE-2021-29967 1. Vulnerability description: CVE-2021-29964 A vulnerability in the Mozilla Thunderbird email client, is related to boundary conditions. Exploitation of the vulnerability could allow an attacker acting remotely...

CVE-2024-21330 Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

...

CVE-2023-48788

creationtimestamp| type| source ---|---|--- 2024-03-12 16:26:39+00:00| seen| https://t.me/ctinow/205806 2024-03-12 16:32:08+00:00| seen| https://t.me/ctinow/205822 2024-03-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1246 2024-03-13 15:30:05+00:00| seen|...

CVE-2024-2049

Summary: CVE-2024-2049 is a SSRF vulnerability in Citrix SD-WAN Standard/Premium Editions (11.4.0–11.4.4.46). The issue allows an attacker to disclose limited information from the appliance via access to the management IP. Affected products/versions: Citrix SD-WAN Standard/Premium Editions on or ...

CVE-2019-19501

creationtimestamp| type| source ---|---|--- 2024-03-12 08:41:47+00:00| seen| https://t.me/ctinow/205373...

CVE-2023-6814

The CVE-2023-6814 issue affects Hitachi Cosminexus Component Container and is caused by insertion of sensitive information into log files, leading to local information disclosure. Affected versions include 11-00 through 11-00-12, 11-10 through 11-10-10, 11-20 through 11-20-07, 11-30 through 11-30...

Authentication flaw

Under certain conditions, Support Web Pages of SAP NetWeaver Process Integration PI - versions 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application...