le-livre.fr Cross Site Scripting vulnerability OBB-3786264

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

le-drone.com Cross Site Scripting vulnerability OBB-3779087

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Maxima Max Pro Power 1.0 486A BLE Traffic Replay

Exploit Title: Maxima Max Pro Power - BLE Traffic Replay Unauthenticated Date: 13-Nov-2023 Exploit Author: Alok kumar [email protected], Cyberpwn Technologies Pvt. Ltd. Vendor Homepage: https://www.maximawatches.com Product Link: https://www.maximawatches.com/products/max-pro-power Firmware...

hotel-le-balze.de Improper Access Control vulnerability OBB-3773596

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-46089

Cross-Site Request Forgery CSRF vulnerability in Lee Le @ Userback Userback plugin = 1.0.13 versions...

CVE-2023-46089

Cross-Site Request Forgery CSRF vulnerability in Lee Le @ Userback Userback plugin = 1.0.13 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Lee Le @ Userback Userback plugin = 1.0.13 versions...

CVE-2023-46089

CVE-2023-46089 denotes a CSRF vulnerability in the WordPress Userback plugin, affected versions

WordPress Archivist – Custom Archive Templates Plugin <= 1.7.7 is vulnerable to Cross Site Scripting (XSS)

Software Archivist – Custom Archive Templates Type Plugin Vulnerable versions = 1.7.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46194 Patch priority Medium CVSS severity Medium 5.8 Developer Claim ownership PSID 9eaf34517c88 Credit...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in josecoelho, Randy Hoyt, steveclarkcouk, Vitaliy Kukin, Eric Le Bail, Tom Ransom Category Meta plugin plugin = 1.2.8 versions...

le-frenchimpact.fr Cross Site Scripting vulnerability OBB-3743116

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-3024

Forcing the Bluetooth LE stack to segment 'prepare write response' packets can lead to an out-of-bounds memory access...

Design/Logic Flaw

Forcing the Bluetooth LE stack to segment 'prepare write response' packets can lead to an out-of-bounds memory access...

CVE-2023-3024

CVE-2023-3024 concerns the Bluetooth LE stack: forcing segmentation of 'prepare write response' packets can cause an out-of-bounds memory access. The vulnerability is documented across sources (NVD, Red Hat, CVE listing, CNNVD, Vulnrichment, etc.) and is described as a memory access violation in ...

le-livre.fr Cross Site Scripting vulnerability OBB-3709165

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

le-mont-saint-michel.com Cross Site Scripting vulnerability OBB-3705502

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Stagtools Plugin <= 2.3.7 is vulnerable to Cross Site Scripting (XSS)

Software Stagtools Type Plugin Vulnerable versions = 2.3.7 Fixed in 2.3.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-41868 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3bb564ac29eb Credits Le Ngoc Anh Required privilege...

Malicious code in le-core-infra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bfbfa43ffabcf67af8f424825487f1ab613517f6605ccaf3a3d7f846b67221d7 The OpenSSF Package Analysis project identified 'le-core-infra' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1541 Malicious code in le-core-infra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bfbfa43ffabcf67af8f424825487f1ab613517f6605ccaf3a3d7f846b67221d7 The OpenSSF Package Analysis project identified 'le-core-infra' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

kernel: use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c

A use-after-free flaw was found in the Linux kernel's implementation of logical link control and adaptation protocol L2CAP, part of the Bluetooth stack in the l2capconnect and l2capleconnectreq functions. An attacker with physical access within the range of standard Bluetooth transmission could...