17606 matches found
CVE-2023-51408
CVE-2023-51408 affects the WordPress plugin WP Optin Wheel – Gamified Optin Email Marketing Tool . The vulnerability applies to versions n/a through 1.4.3 and is described as Exposure of Sensitive Information to an Unauthorized Actor . Public sources provide concrete details: the affected product...
CVE-2023-52190
CVE-2023-52190 concerns the WordPress plugin Coupon Referral Program (WP Swings) with an unauthenticated exposure of sensitive data. Public sources (Wordfence, Patchstack, and CVE listings) indicate: affected versions are up to and including 1.7.2; the issue is described as sensitive data exposur...
CVE-2023-41710
Open-Xchange App Suite CVE-2023-41710 concerns a cross-site scripting (XSS) vulnerability where user-defined script code was not properly sanitized when added to the DOM, potentially allowing attackers to entice users to execute code within a trusted domain. Affected product references include Op...
CVE-2024-0303
CVE-2024-0303 affects Youke365 up to 1.5.3, with a vulnerability in /app/api/controller/caiji.php (Parameter Handler) where manipulating the url parameter enables server-side request forgery (SSRF). Reports indicate remote exploitation and public disclosure. Connected sources corroborate SSRF in ...
IBM CICS Transaction Gateway 安全漏洞
IBM CICS Transaction Gateway is a connector for modernizing enterprise CICS assets from International Business Machines IBM. An access control error vulnerability exists in IBM CICS Transaction Gateway version 9.3, which can be exploited by an attacker to transfer or view files...
CVE-2023-7211
CVE-2023-7211 affects Uniway Router 2.0, specifically the Administrative Web Interface. The vulnerability arises from unknown code in that component, causing authentication to rely on the client’s IP address. The issue enables remote exploitation with high impact across confidentiality, integrity...
CVE-2017-9844
creationtimestamp| type| source ---|---|--- 2024-01-06 18:40:59+00:00| seen| https://t.me/arpsyndicate/2569 2025-04-25 08:41:00+00:00| seen| https://thehackernews.com/2025/04/sap-confirms-critical-netweaver-flaw.html 2025-04-25 13:37:42+00:00| seen|...
CVE-2017-5878
creationtimestamp| type| source ---|---|--- 2024-01-06 13:23:40+00:00| seen| https://t.me/arpsyndicate/2540 2024-01-09 01:13:05+00:00| seen| https://t.me/arpsyndicate/2699...
CVE-2023-52146
CVE-2023-52146 : Affects WordPress plugin 404 Solution (up to version 2.33.0). Public details in connected docs indicate a vulnerability titled “Sensitive Information Exposure via Log File” within the 404 Solution plugin, leading to exposure of sensitive data via logs. The vulnerability has been ...
CVE-2023-52151
CVE-2023-52151 affects Uncanny Automator (WordPress) up to version 5.1.0.2. The vulnerability is an information disclosure via log files (Sensitive Information Exposure via Log File) that could be accessed by an unauthorized actor. Root cause is exposure of sensitive data logged by the plugin, po...
guero.net Cross Site Scripting vulnerability OBB-3828526
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-52184
CVE-2023-52184 is a Cross-Site Request Forgery (CSRF) vulnerability in the WP Job Portal – A Complete Job Board plugin, affecting versions up to 2.0.6. The NVD metrics show CVSS 3.1 base score 8.8 (HIGH) with attack vector NETWORK, attack complexity LOW, privileges required NONE, user interaction...
Facebook introduces another way to track you – Link History
In what seems like yet another attempt to adapt its platform to prepare for new regulations, Facebook has started rolling out a new feature called Link History. Link History allows users to view and re-visit links they have visited with their Facebook browsing activity. Obviously Facebook will te...
CVE-2023-3726
OCSInventory allow stored email template with special characters that lead to a Stored cross-site Scripting...
How to comply with HIPAA requirements
Understanding the Grounds of HIPAA Let's take a deep dive into understanding the broad structure and intent behind the Act for the Secure Management and Duty of Patient Data ASMDPD, a landmark piece of legislation that has deeply transformed the healthcare sector since its inception at the turn o...
cloncurry.qld.gov.au Cross Site Scripting vulnerability OBB-3827914
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-20807
CVE-2024-20807 describes an implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16. The issue enables a local attacker to obtain sensitive information due to improper handling of implicit intents within the Samsung Email app. The vulnerability is documented across mul...
CVE-2023-50082
CVE-2023-50082 affects Aoyun Technology pbootcms v3.1.2 and is caused by Incorrect Access Control, enabling session leakage that can expose sensitive information and allow a user to avoid logging into the backend management platform. The provided connected documents consistently describe the issu...
CVE-2024-21633
creationtimestamp| type| source ---|---|--- 2024-01-03 18:31:58+00:00| seen| https://t.me/ctinow/162527 2024-01-04 01:37:23+00:00| seen| https://t.me/cibsecurity/74338 2024-01-07 21:36:47+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6387 2024-01-08 09:16:42+00:00| seen|...
CVE-2023-46742 CubeFS leaks users key in logs
CubeFS is an open-source cloud-native file storage system. CubeFS prior to version 3.3.1 was found to leak users secret keys and access keys in the logs in multiple components. When CubeCS creates new users, it leaks the users secret key. This could allow a lower-privileged user with access to th...