3624 matches found
e-thaksalawalms.moe.gov.lk Cross Site Scripting vulnerability OBB-3869632
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-28163
creationtimestamp| type| source ---|---|--- 2024-03-12 02:26:38+00:00| seen| https://t.me/ctinow/205247 2024-03-12 02:26:48+00:00| seen| https://t.me/ctinow/205254...
CVE-2024-27902
creationtimestamp| type| source ---|---|--- 2024-03-12 02:26:37+00:00| seen| https://t.me/ctinow/205246 2024-03-12 02:26:47+00:00| seen| https://t.me/ctinow/205253...
CVE-2024-25644
creationtimestamp| type| source ---|---|--- 2024-03-12 02:26:34+00:00| seen| https://t.me/ctinow/205243 2024-03-12 02:26:45+00:00| seen| https://t.me/ctinow/205250...
CVE-2024-22127
creationtimestamp| type| source ---|---|--- 2024-03-12 02:26:32+00:00| seen| https://t.me/ctinow/205241 2024-03-12 02:26:39+00:00| seen| https://t.me/ctinow/205248 2025-11-21 12:01:02+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60394 2025-11-21 15:00:09+00:00|...
CVE-2023-49785
creationtimestamp| type| source ---|---|--- 2024-03-12 01:26:57+00:00| seen| https://t.me/ctinow/205222 2024-03-12 01:26:58+00:00| seen| https://t.me/ctinow/205223 2024-03-13 08:39:26+00:00| seen| https://t.me/arpsyndicate/4186 2024-03-13 14:00:55+00:00| seen| https://t.me/truesecator/5515...
Security Updates for Microsoft Dynamics 365 (on-premises) (March 2024)
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by a cross-site scripting vulnerability. An attacker can spoof a session to perform actions with the privileges of another user. Note that Nessus has not tested for these issues but has instead relied...
WordPress Formidable Registration Plugin < 2.12 is vulnerable to Broken Authentication
Software Formidable Registration Type Plugin Vulnerable versions 2.12 Fixed in 2.12 OWASP Top 10 A4: Insecure Design Classification Broken Authentication CVE CVE-2024-1290 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID de229a590aad Credits Scott Kingsley Clark...
.NET 6.0 Update - March 12, 2024 (KB5036450)
None None...
Chromecast Security Bulletin—March 2024Stay organized with collectionsSave and categorize content based on your preferences.
The Chromecast Security Bulletin contains details of security vulnerabilities affecting supported Chromecast with Google TV devices Chromecast devices. For Chromecast devices, security patch levels of 2024-03-01 or later address all applicable issues in the March 2024 Android Security Bulletin an...
Security Updates for Microsoft Visual Studio Products (March 2024)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple denial of service vulnerabilities. An attacker can exploit these issues to cause the affected component to deny system or application services. Note that Nessus has not tested for these issue...
WordPress Bulgarisation for WooCommerce Plugin <= 3.0.14 is vulnerable to Broken Access Control
Software Bulgarisation for WooCommerce Type Plugin Vulnerable versions = 3.0.14 Fixed in 3.0.15 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-0683 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 9bca55e3b9c3 Credits Francesc...
WordPress Elementor – Header, Footer & Blocks Template Plugin <= 1.6.24 is vulnerable to Cross Site Scripting (XSS)
Software Elementor – Header, Footer & Blocks Template Type Plugin Vulnerable versions = 1.6.24 Fixed in 1.6.25 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1237 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d8efb70c30ae...
KB5035849: Windows 10 version 1809 / Windows Server 2019 Security Update (March 2024)
The remote Windows host is missing security update 5035849. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2024-21441, CVE-2024-21444, CVE-2024-21450, CVE-2024-26161, CVE-2024-26166 - Windows USB Hub...
CVE-2024-28120
creationtimestamp| type| source ---|---|--- 2024-03-11 23:27:09+00:00| seen| https://t.me/ctinow/205137 2024-03-11 23:27:23+00:00| seen| https://t.me/ctinow/205145 2024-03-13 15:53:39+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10140...
CVE-2024-25854
creationtimestamp| type| source ---|---|--- 2024-03-11 23:27:03+00:00| seen| https://t.me/ctinow/205134 2024-03-11 23:27:17+00:00| seen| https://t.me/ctinow/205142...
CVE-2024-25114
creationtimestamp| type| source ---|---|--- 2024-03-11 23:27:02+00:00| seen| https://t.me/ctinow/205133 2024-03-11 23:27:16+00:00| seen| https://t.me/ctinow/205141...
CVE-2024-27235
creationtimestamp| type| source ---|---|--- 2024-03-11 20:26:40+00:00| seen| https://t.me/ctinow/205022...