vichoyland.org Cross Site Scripting vulnerability OBB-3936211

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Multiple vulnerabilities in ID Link Manager and FUJITSU Software TIME CREATOR

Overview ID Link Manager and FUJITSU Software TIME CREATOR provided by Fsas Technologies Inc. contain multiple vulnerabilities listed below. Path Traversal CWE-36 CVE-2024-33620 Missing Authentication CWE-306 CVE-2024-33622 Information disclosure CWE-204 CVE-2024-34024 Christian Demko of WithSecu...

WordPress WordPress Picture / Portfolio / Media Gallery Plugin <= 3.0.1 is vulnerable to Server Side Request Forgery (SSRF)

Software WordPress Picture / Portfolio / Media Gallery Type Plugin Vulnerable versions = 3.0.1 Fixed in N/A OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2024-5021 Patch priority Low CVSS severity Low 7.2 Developer Claim ownership PSID 4f6e62e03ba9 Credits...

sg-balk.de Cross Site Scripting vulnerability OBB-3935993

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cyberbelka.ru Cross Site Scripting vulnerability OBB-3935965

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-6045

creationtimestamp| type| source ---|---|--- 2024-06-17 09:54:04+00:00| published-proof-of-concept| https://t.me/HackingInsights/2665 2024-06-18 06:41:08+00:00| seen| https://t.me/habrcomnews/28606 2024-06-18 10:43:48+00:00| published-proof-of-concept| https://t.me/hydral0gs/2925 2024-06-18...

Citrix Endpoint Management (aka XenMobile Server) 10.16.0 Rolling Patch 1

Package name: xms10.16.0.10108.bin For: XenMobile Server 10.16.0 Deployment type: On-premises only Replaces: None Date: June 2024 Languages supported: English US Important notes about this update As a best practice, Citrix recommends that you install this and other updates to ensure that you have...

CVE-2024-38395

creationtimestamp| type| source ---|---|--- 2024-06-16 18:51:02+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7677 2024-06-26 16:06:39+00:00| seen| MISP/5b5d7be3-1582-40fe-9006-139de65f9b7d 2024-06-29 14:34:01+00:00| published-proof-of-concept| https://t.me/GhostClanInt/25179...

notebookcampus.de Cross Site Scripting vulnerability OBB-3935638

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fatecsdp.edu.br Cross Site Scripting vulnerability OBB-3935342

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: Im appearing on a panel on Society and Democracy at ACM Collective Intelligence in Boston, Massachusetts. The conference runs from June 26 through 29, 2024, and my panel is at 9:00 AM on Friday, June 28. Im speaking on "Reimagining...

Akamai’s Perspective on June’s Patch Tuesday 2024

...

pestel-debord.com Cross Site Scripting vulnerability OBB-3935139

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

momipara.jp Cross Site Scripting vulnerability OBB-3935125

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Schema App Structured Data Plugin <= 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Schema App Structured Data Type Plugin Vulnerable versions = 2.2.0 Fixed in 2.2.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-0892 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c2993c18775c Credits Francesco...

WordPress Popup Builder Plugin <= 4.3.1 is vulnerable to Broken Access Control

Software Popup Builder Type Plugin Vulnerable versions = 4.3.1 Fixed in 4.3.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-6696 Patch priority Low CVSS severity Low 6.3 Developer Claim ownership PSID 7eeb41bcfcb3 Credits Lucio Sá Required privilege...

Microsoft Security Update Validation Report June 2024

Microsoft’s June 2024 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

realtimerental.com Cross Site Scripting vulnerability OBB-3934964

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Microsoft’s June 2024 Patch Tuesday Addresses 49 Vulnerabilities

...

dexl.co.uk Cross Site Scripting vulnerability OBB-3934937

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...