pp.cyber-l.co.jp Cross Site Scripting vulnerability OBB-4041078

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

eshop.macsales.com Cross Site Scripting vulnerability OBB-4041071

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

amorosobaking.com Cross Site Scripting vulnerability OBB-4041072

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-13557

creationtimestamp| type| source ---|---|--- 2025-03-29 07:28:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9536 2025-03-29 10:29:02+00:00| seen| https://t.me/cvedetector/21508 2025-03-29 23:25:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114248301386235895 2025-03-29...

CVE-2025-28090

creationtimestamp| type| source ---|---|--- 2025-03-29 00:26:56+00:00| seen| https://t.me/cvedetector/21479 2025-03-31 19:31:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9741 2025-03-31 21:49:01+00:00| seen|...

greenfinanceinstitute.com Cross Site Scripting vulnerability OBB-4041060

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sportsinopmt.com.br Cross Site Scripting vulnerability OBB-4041049

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

presidentejanioquadros.ba.gov.br Cross Site Scripting vulnerability OBB-4041031

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

coracaodemaria.ba.gov.br Cross Site Scripting vulnerability OBB-4041024

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bomjesus.pb.leg.br Cross Site Scripting vulnerability OBB-4041012

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-54291

creationtimestamp| type| source ---|---|--- 2025-03-28 15:28:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9376 2025-03-28 17:37:11+00:00| seen| https://bsky.app/profile/redteamnews.bsky.social/post/3llhe4n3ix52r 2025-03-28 17:45:32+00:00| seen|...

pop.crelab.ru Cross Site Scripting vulnerability OBB-4041001

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

icomspain.com Cross Site Scripting vulnerability OBB-4040991

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-2857

creationtimestamp| type| source ---|---|--- 2025-03-28 04:44:00+00:00| seen| https://thehackernews.com/2025/03/mozilla-patches-critical-firefox-bug.html 2025-03-28 05:48:21+00:00| seen| https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3llg4i66r4h52 2025-03-28 06:42:39+00:0...

SUSE CVE-2022-49741

In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: fix error handling code in ufxusbprobe The current error handling code in ufxusbprobe have many unmatching issues, e.g., missing ufxfreeusblist, destroymodedb label should only include framebufferrelease,...

CVE-2023-52988

A vulnerability was found in the Linux kernel's ALSA subsystem in the addsecretdacpath function, where improper array handling can lead to out-of-bounds access. This occurs if the return value of the call to sndhdagetconnections returns an error code a negative number, which is stored in the...

OSV-2025-240 Security exception in com.powsybl.commons.xml.XmlUtil.lambda$skipSubElements$0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=406332767 Crash type: Security exception Crash state: com.powsybl.commons.xml.XmlUtil.lambda$skipSubElements$0 com.powsybl.commons.xml.XmlUtil.readSubElements com.powsybl.commons.xml.XmlUtil.skipSubElements...

Bank Locker Management System search-report-details.php File SQL Injection Vulnerability

Bank Locker Management System is a bank locker management system. Bank Locker Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the searchinput parameter of the search-report-details.php file. An attacker ca...

Progress Telerik Report Server 2024 Q1 (10.0.24.305) - Authentication Bypass

Exploit Title: Progress Telerik Report Server 2024 Q1 10.0.24.305 - Authentication Bypass Fofa Dork: title="Telerik Report Server" Date: 2024-09-22 Exploit Author: VeryLazyTech GitHub: https://github.com/verylazytech/CVE-2024-4358 Vendor Homepage: https://www.telerik.com/report-server Software...

Litespeed Cache 6.5.0.1 - Authentication Bypass

Exploit Title: Litespeed Cache 6.5.0.1 - Authentication Bypass Google Dork: if applicable Date: reported on 17 September 2024 Exploit Author: Gnzls Vendor Homepage: https://www.litespeedtech.com/ Software Link: https://github.com/gbrsh/CVE-2024-44000?tab=readme-ov-file Version: 6.5.0.1 Tested on:...