estilosdevida.com Cross Site Scripting vulnerability OBB-3364231

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

merseamuseum.org.uk Cross Site Scripting vulnerability OBB-3363627

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

gisabrevetti.it Cross Site Scripting vulnerability OBB-3363545

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

phonobase.org Cross Site Scripting vulnerability OBB-3363349

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CISA Releases One Industrial Control Systems Advisory

CISA released one Industrial Control Systems ICS advisory on May 25, 2023. This advisory provides timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-145-01 Moxa MXsecurity Series CISA encourages users and administrators to review the newly...

SUSE CVE-2023-33297

Bitcoin Core before 24.1, when debug mode is not used, allows attackers to cause a denial of service e.g., CPU consumption because draining the inventory-to-send queue is inefficient, as exploited in the wild in May 2023...

WordPress WS Form LITE Plugin <= 1.9.117 is vulnerable to Bypass Vulnerability

Software WS Form LITE Type Plugin Vulnerable versions = 1.9.117 Fixed in 1.9.118 OWASP Top 10 A6: Security Misconfiguration Classification Bypass Vulnerability CVE N/A Patch priority Low CVSS severity Low 5.3 Developer WS Form PSID 4f6ad1d866aa Credits WordFence Required privilege Unauthenticated...

CVE-2023-2064

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Minova Technology eTrace allows SQL Injection. This issue affects eTrace: before 23.05.20...

What’s New for Developers: May 2023

...

CVE-2023-31860

creationtimestamp| type| source ---|---|--- 2023-05-24 00:40:25+00:00| seen| https://t.me/cibsecurity/64652 2025-01-17 16:56:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2151...

CVE-2023-31518

creationtimestamp| type| source ---|---|--- 2023-05-24 00:37:20+00:00| seen| https://t.me/cibsecurity/64647...

WordPress Tutor LMS Plugin <= 2.1.8 is vulnerable to Broken Access Control

Software Tutor LMS Type Plugin Vulnerable versions = 2.1.8 Fixed in 2.1.9 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-25799 Patch priority High CVSS severity High 8.3 Developer Claim ownership PSID c5a261a00ca9 Credits Rafie Muhammad Patchstack Require...

CVE-2023-33599

creationtimestamp| type| source ---|---|--- 2023-05-23 18:26:30+00:00| seen| https://t.me/cibsecurity/64636...

corycos.com Cross Site Scripting vulnerability OBB-3360196

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

chenchiehjen.com Cross Site Scripting vulnerability OBB-3360045

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

chemi-pharm.com Cross Site Scripting vulnerability OBB-3360043

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

terrasearch.com.au Cross Site Scripting vulnerability OBB-3359578

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pizzaritro.it Cross Site Scripting vulnerability OBB-3359354

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

paolagrecoatelier.it Cross Site Scripting vulnerability OBB-3359234

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

New WinTapix.sys Malware Engages in Multi-Stage Attack Across Middle East

An unknown threat actor has been observed leveraging a malicious Windows kernel driver in attacks likely targeting the Middle East since at least May 2020. Fortinet Fortiguard Labs, which dubbed the artifact WINTAPIX WinTapix.sys, attributed the malware with low confidence to an Iranian threat...