CVE-2025-24885

creationtimestamp| type| source ---|---|--- 2025-01-30 22:42:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113919718883352677 2025-01-30 23:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgymhdwhet2p 2025-01-31 02:49:26+00:00| seen|...

CVE-2024-2658

creationtimestamp| type| source ---|---|--- 2025-01-30 17:14:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113918429685955022 2025-01-30 17:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxydqje2a2b 2025-01-30 20:57:53+00:00| seen|...

CVE-2024-13549

creationtimestamp| type| source ---|---|--- 2025-01-30 14:17:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxoecg53l2w 2025-01-30 14:47:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113917848568461766 2025-01-30 16:46:35+00:00| seen|...

CVE-2025-0869

creationtimestamp| type| source ---|---|--- 2025-01-30 13:03:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113917442681520404 2025-01-30 13:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxkwhxsnb2h 2025-09-01 13:53:38+00:00| seen|...

CVE-2024-13694

creationtimestamp| type| source ---|---|--- 2025-01-30 08:23:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113916339058988790 2025-01-30 09:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgx5ipqogz2c 2025-01-30 10:11:36+00:00| seen|...

CVE-2025-0847

creationtimestamp| type| source ---|---|--- 2025-01-30 01:33:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113914727296512820 2025-01-30 02:16:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwg3hpr742r 2025-01-30 03:18:43+00:00|...

CVE-2025-24374

Twig is a template language for PHP. When using the ?? operator, output escaping was missing for the expression on the left side of the operator. This vulnerability is fixed in 3.19.0...

CVE-2024-56614

creationtimestamp| type| source ---|---|--- 2024-12-27 15:18:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecbwjpbav2i 2025-01-30 03:45:10+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lgwl2cr5cc2s 2025-01-30 07:27:10+00:00| seen|...

people.epfl.ch Cross Site Scripting vulnerability OBB-3846351

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

nickrichardsonlaw.com Cross Site Scripting vulnerability OBB-3846289

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pcbwing.com Cross Site Scripting vulnerability OBB-3846228

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

RHSA-2024:0572

creationtimestamp| type| source ---|---|--- 2024-01-30 14:21:48+00:00| seen| https://t.me/ctinow/175926...

WordPress Don't Muck My Markup Plugin <= 1.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software Don't Muck My Markup Type Plugin Vulnerable versions = 1.8 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-23510 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 9934a7f8d741 Credits Nguyen Xuan Chien...

CVE-2024-0411

creationtimestamp| type| source ---|---|--- 2024-01-11 18:37:35+00:00| seen| https://t.me/ctinow/166723 2024-01-30 12:46:40+00:00| seen| https://t.me/ctinow/175871...

CVE-2023-38267

creationtimestamp| type| source ---|---|--- 2024-01-11 04:32:10+00:00| seen| https://t.me/ctinow/166298 2024-01-30 08:11:05+00:00| seen| https://t.me/ctinow/175724...

desertspringsresort.es Cross Site Scripting vulnerability OBB-3171889

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

glad2bhome.com Cross Site Scripting vulnerability OBB-3170722

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

soeren-hentzschel.at Cross Site Scripting vulnerability OBB-3169485

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Grafana -- Stored XSS in TraceView panel

Grafana Labs reports: During an internal audit of Grafana on January 30, a member of the engineering team found a stored XSS vulnerability affecting the TraceView panel. The stored XSS vulnerability was possible because the value of a span’s attributes/resources were not properly sanitized, and...

blossoming-health.com Cross Site Scripting vulnerability OBB-2349336

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...