EUVD-2024-55647

Landray OA contains an unauthenticated HQL injection vulnerability that allows unauthenticated attackers to query arbitrary Hibernate entity classes by injecting malicious HQL syntax into the uid POST parameter of the wechatLoginHelper.do endpoint. Attackers can exploit the lack of input...

Security Bulletin: NVIDIA Merlin - May 2026

NVIDIA has released a software update for NVIDIA® Merlin. To protect your system, clone or update this software to include any commit after March 11, 2026 from the NVIDIA-Merlin/Transformers4Rec GitHub repo. Go to NVIDIA Product Security. Details The following table summarizes the potential...

CVE-2026-3964

creationtimestamp| type| source ---|---|--- 2026-03-11 22:16:01+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3964...

CVE-2025-61190

creationtimestamp| type| source ---|---|--- 2026-03-11 17:02:25+00:00| seen| https://gist.github.com/MerttTuran/9cf7de549749fe3ef7ce08d65e3540bd...

Security Updates for Microsoft Visual Studio 2019 16.11 Products (March 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - An undisclosed Visual Studio Elevation of Privilege Vulnerability CVE-2025-24998 - An undisclosed Visual Studio Elevation of Privilege Vulnerability...

CVE-2025-24051

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:48:36+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114145054897160000...

CVE-2025-22366

creationtimestamp| type| source ---|---|--- 2025-03-11 14:43:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114144328855531757 2025-08-13 13:26:35+00:00| seen| MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868...

GHSA-44F7-5FJ5-H4PX

creationtimestamp| type| source ---|---|--- 2025-03-11 14:39:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7151...

CVE-2023-9012

creationtimestamp| type| source ---|---|--- 2025-03-11 14:33:55+00:00| seen| https://gist.github.com/thecodefreaker/25c6d23462ef4dc919e865f57340022e...

RHSA-2024:8708

creationtimestamp| type| source ---|---|--- 2025-03-11 02:40:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7100 2025-04-10 21:49:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11358...

CVE-2025-26695

When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8...

CVE-2024-23611

creationtimestamp| type| source ---|---|--- 2024-03-11 17:31:47+00:00| seen| https://t.me/ctinow/204890 2024-03-11 17:31:52+00:00| seen| https://t.me/ctinow/204895...

taborajeto.cz Cross Site Scripting vulnerability OBB-3869495

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

geeksforgeeks.org Cross Site Scripting vulnerability OBB-3869393

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

wsm.be Cross Site Scripting vulnerability OBB-3869336

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cicot.or.th Cross Site Scripting vulnerability OBB-3869281

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2019-19198

creationtimestamp| type| source ---|---|--- 2024-03-11 08:41:25+00:00| seen| https://t.me/ctinow/204510...

CVE-2024-2314

creationtimestamp| type| source ---|---|--- 2024-03-11 00:26:13+00:00| seen| https://t.me/ctinow/204376 2024-03-11 00:26:18+00:00| seen| https://t.me/ctinow/204380 2024-03-11 16:01:47+00:00| seen| https://t.me/ctinow/204795...

CVE-2023-25148

creationtimestamp| type| source ---|---|--- 2023-03-11 00:27:29+00:00| seen| https://t.me/cibsecurity/59852...

pt.anuncioo.com XSS vulnerability

Open Bug Bounty ID: OBB-451792 Description| Value ---|--- Affected Website:| pt.anuncioo.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...