68 matches found
CVE-2025-21504
creationtimestamp| type| source ---|---|--- 2025-01-21 21:16:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrms74xk2p...
CVE-2025-22709
creationtimestamp| type| source ---|---|--- 2025-01-21 14:16:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgb256rtwt27...
CVE-2024-55632
creationtimestamp| type| source ---|---|--- 2024-12-31 17:09:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113748537865125771 2024-12-31 17:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lemkdprvtc25 2024-12-31 18:43:59+00:00| seen|...
CVE-2024-12990
creationtimestamp| type| source ---|---|--- 2024-12-27 18:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecltnvdxl25 2024-12-27 20:12:24+00:00| seen| https://t.me/cvedetector/13790...
joemls.dils.tku.edu.tw Cross Site Scripting vulnerability OBB-3868970
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-45559
CVE-2023-45559 affects Tamaki_hamanoki Line v.13.6.1. The issue allows attackers to send crafted notifications by leaking the channel access token. Affected component is the Line messaging platform implementation in v.13.6.1; root cause attributed to token leakage enabling unauthorized notificati...
UBUNTU-CVE-2023-35668
In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
UBUNTU-CVE-2023-21291
In visitUris of Notification.java, there is a possible way to reveal image contents from another user due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...
DRUPAL-CONTRIB-2023-047
This module enables notifications to be sent to all users of a particular role, or to the content's author when a piece of content is transitioned from one state to another via core's content\moderation module. The module doesn't sufficiently check access to content when sending notifications. Th...
CVE-2023-32207
A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox 113, Firefox ESR 102.11, and Thunderbird 102.11...
CVE-2023-28632
GLPI is a free asset and IT management software package. Starting in version 0.83 and prior to versions 9.5.13 and 10.0.7, an authenticated user can modify emails of any user, and can therefore takeover another user account through the "forgotten password" feature. By modifying emails, the user c...
xn--vhq36s12f1q1bnnj0py2sa.com. Cross Site Scripting vulnerability OBB-3246550
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-20477
In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifications due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2022-3846 Workreap - Freelance Marketplace and Directory < 2.6.3 - Subscriber+ Private Message Disclosure via IDOR
The Workreap WordPress theme before 2.6.3 has a vulnerability with the notifications feature as it's possible to read any user's notification employer or freelancer as the notification ID is brute-forceable...
unionteamltd.com.hk Cross Site Scripting vulnerability OBB-3084056
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
seiyogakuin.ac.jp Cross Site Scripting vulnerability OBB-3012041
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
baeckerei-cafe-burkard.de Cross Site Scripting vulnerability OBB-2792010
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Nextcloud: Notification implicit PendingIntent in com.nextcloud.client allows to access contacts
When the victim downloads files in nextcloud.A notification will be triggered. The content of the notification is "Downloaded".This notification is used to remind the user that the download is complete.The pendingintent in this notification is an implicit intent. At this time a malicious app with...
metashop.nl Cross Site Scripting vulnerability OBB-1459000
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
re-mart.co.kr Cross Site Scripting vulnerability OBB-1409975
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...