Multi-vendor BIOS Security Vulnerabilities (February, 2024) - Lenovo Support US

No description provided...

GHSA-XWMV-CX7P-FQFC

creationtimestamp| type| source ---|---|--- 2024-02-13 18:56:50+00:00| seen| https://t.me/ctinow/184027...

CVE-2024-20969

creationtimestamp| type| source ---|---|--- 2024-02-10 07:02:20+00:00| seen| https://t.me/ctinow/182437 2025-10-28 17:57:52+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m4bj2jfflk2d...

Design/Logic Flaw

nonebot2 is a cross-platform Python asynchronous chatbot framework written in Python. This security advisory pertains to a potential information leak e.g., environment variables in instances where developers utilize MessageTemplate and incorporate user-provided data into templates. The identified...

PYSEC-2024-37

nonebot2 is a cross-platform Python asynchronous chatbot framework written in Python. This security advisory pertains to a potential information leak e.g., environment variables in instances where developers utilize MessageTemplate and incorporate user-provided data into templates. The identified...

CVE-2024-21624 Potential Information Leak in User-Constructed Message Templates in nonebot2

nonebot2 is a cross-platform Python asynchronous chatbot framework written in Python. This security advisory pertains to a potential information leak e.g., environment variables in instances where developers utilize MessageTemplate and incorporate user-provided data into templates. The identified...

CVE-2024-21624 Potential Information Leak in User-Constructed Message Templates in nonebot2

nonebot2 is a cross-platform Python asynchronous chatbot framework written in Python. This security advisory pertains to a potential information leak e.g., environment variables in instances where developers utilize MessageTemplate and incorporate user-provided data into templates. The identified...

NoneBot Potential Information Leak in User-Constructed Message Templates

Impact This security advisory pertains to a potential information leak e.g., environment variables in instances where developers utilize MessageTemplate and incorporate user-provided data into templates. Patches The identified vulnerability has been remedied in fix 2509 and will be included in...

CVE-2024-20253

A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provided data that is being read into memory...

Critical Cisco Flaw Lets Hackers Remotely Take Over Unified Comms Systems

Cisco has released patches to address a critical security flaw impacting Unified Communications and Contact Center Solutions products that could permit an unauthenticated, remote attacker to execute arbitrary code on an affected device. Tracked as CVE-2024-20253 CVSS score: 9.9, the issue stems...

CVE-2024-23902

A cross-site request forgery CSRF vulnerability in Jenkins GitLab Branch Source Plugin 684.veafa7c1e2fe3 and earlier allows attackers to connect to an attacker-specified URL...

CVE-2024-0705

creationtimestamp| type| source ---|---|--- 2024-01-19 11:26:27+00:00| seen| https://t.me/ctinow/170149 2024-01-22 18:27:42+00:00| published-proof-of-concept| https://t.me/codeb0ss/1362 2024-01-26 17:35:17+00:00| seen| https://t.me/arpsyndicate/3015 2024-02-12 18:16:51+00:00| seen|...

5talenti.it Improper Access Control vulnerability OBB-3836595

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

point-s.de Cross Site Scripting vulnerability OBB-3831830

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-21645

creationtimestamp| type| source ---|---|--- 2024-01-06 00:58:43+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-ghmw-rwh8-6qmr 2024-01-08 15:26:34+00:00| seen| https://t.me/ctinow/164402 2024-01-25 11:36:53+00:00| seen| https://t.me/ctinow/173388...

Privilege Escalation

craftcms/cms is vulnerable to Privilege Escalation. The vulnerability is due to the actionSave function within ElementsController.php, because there are no checks for save permissions before and after applying POST params to the element, as well as the actionSaveUser function within...

mebleklero.pl Improper Access Control vulnerability OBB-3826823

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-51105

creationtimestamp| type| source ---|---|--- 2023-12-26 16:27:01+00:00| seen| https://t.me/ctinow/159361 2024-01-19 12:11:52+00:00| seen| https://t.me/ctinow/170166...

staragon.com Improper Access Control vulnerability OBB-3812355

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

shougiya.com Improper Access Control vulnerability OBB-3810700

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...