EUVD-2023-55568

Malicious code in bioql PyPI...

EUVD-2023-35401

Malicious code in bioql PyPI...

jjcasey.ie Improper Access Control vulnerability OBB-3833519

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cargest.es Improper Access Control vulnerability OBB-3821427

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-50835

Cross-Site Request Forgery CSRF vulnerability in Praveen Goswami Advanced Category Template.This issue affects Advanced Category Template: from n/a through 0.1...

CVE-2023-50835

Cross-Site Request Forgery CSRF vulnerability in Praveen Goswami Advanced Category Template.This issue affects Advanced Category Template: from n/a through 0.1...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Praveen Goswami Advanced Category Template.This issue affects Advanced Category Template: from n/a through 0.1...

CVE-2023-50835

CVE-2023-50835 is a CSRF vulnerability in the Advanced Category Template. Red Hat’s entry confirms the issue affects the Advanced Category Template up to version 0.1 (no details on fixed version are provided in the connected doc). The CVSS data in the initial document indicates a high-severity co...

PT-2023-31666 · Unknown · Praveen Goswami Advanced Category Template

Name of the Vulnerable Software and Affected Versions: Praveen Goswami Advanced Category Template versions 0.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on...

silverbarrel.com Improper Access Control vulnerability OBB-3812018

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

maxillexpress.com Improper Access Control vulnerability OBB-3805427

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cargo-bee-solutions.com Improper Access Control vulnerability OBB-3795077

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-2RMR-XW8M-22Q9 Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint

Impact An unsanitized input of Next.js SDK tunnel endpoint allows sending HTTP requests to arbitrary URLs and reflecting the response back to the user. This could open door for other attack vectors: client-side vulnerabilities: XSS/CSRF in the context of the trusted domain; interaction with...

lichthaus-musik.de Improper Access Control vulnerability OBB-3768471

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-31072

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Praveen Goswami Advanced Category Template plugin = 0.1 versions...

CVE-2023-31072

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Praveen Goswami Advanced Category Template plugin = 0.1 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Praveen Goswami Advanced Category Template plugin = 0.1 versions...

CVE-2023-31072

CVE-2023-31072 : Unauthenticated Reflected XSS in the WordPress plugin Advanced Category Template (praveen goswami) ≤ 0.1. Root cause: inputs are not properly sanitised/escaped before output. Impact: potential script execution in admin-facing contexts; exploit requires no authentication but user ...

PT-2023-23135 · Unknown · Praveen Goswami Advanced Category Template

Name of the Vulnerable Software and Affected Versions: Praveen Goswami Advanced Category Template plugin versions 0.1 and earlier Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...

Debian DLA-1885-1 : linux-4.9 security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2017-18509 Denis Andzakovic reported a missing type check in the IPv4 multicast routing implementation. A user with the CAPNETADMIN capability in a...