PT-2025-12902

Name of the Vulnerable Software and Affected Versions Narnoo Operator versions n/a through 2.0.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS in Narnoo Operator. Recommendations Fo...

WordPress plugin Narnoo Operator has a cross-site scripting vulnerability

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exis...

CVE-2025-23680: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Narnoo Narnoo Operator narnoo-shortcodes allows Reflected XSS.This issue affects Narnoo Operator: from n/a through = 2.0.0...

GHSA-3WGM-2GW2-VH5M vulnerabilities

Vulnerabilities for packages: vcluster, kubernetes...

CVE-2025-1767 vulnerabilities

Vulnerabilities for packages: vcluster, kubernetes...

Important: Red Hat Security Advisory: VolSync 0.12.1 security fixes and enhancements for RHEL 9

VolSync v0.12 general availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to gcc, github.com/opencontainers/runc and github.com/containers/common (CVE-2024-45310, CVE-2020-11023, CVE-2024-9341)

Summary gcc, github.com/opencontainers/runc and github.com/containers/common used by IBM MQ Operator and Queue Manager container images are vulnerable by executing untrusted code using jQuery's DOM manipulation methods and bypassing security restrictions which might allow an attacker to access...

nivagcollectables.co.uk Cross Site Scripting vulnerability OBB-4040073

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: kargo, prometheus, secrets-store-csi-driver-provider-azure, aactl, kubernetes-dashboard-auth, tkn, policy-controller, seaweedfs, crossplane, crossplane-provider-azure-storage, boring-registry, bank-vaults, temporal-server, k8sgpt, flux-source-controller, gitea,...

CVE-2023-6841 vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2023-6841 vulnerabilities

Vulnerabilities for packages: keycloak...

postpng-live.prontoavenue.biz Cross Site Scripting vulnerability OBB-4038813

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

carlton.infrankfurtammain.net Cross Site Scripting vulnerability OBB-4038681

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

campanilla.ushuaiahotelspage.com Cross Site Scripting vulnerability OBB-4038653

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

blog.kolmisoft.com Cross Site Scripting vulnerability OBB-4038630

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

blog.iccfish.com Cross Site Scripting vulnerability OBB-4038625

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

multipla.biz Cross Site Scripting vulnerability OBB-4038588

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

best-western-plus-concordville-hotel.concordville.getpennsylvaniahotels.com Cross Site Scripting vulnerability OBB-4038527

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

best-sabinal.hotels-andalucia.com Cross Site Scripting vulnerability OBB-4038513

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bayview-park-hotel-manila.hotel-dir.com Cross Site Scripting vulnerability OBB-4038415

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...