bestbathroom.mee.nu Cross Site Scripting vulnerability OBB-4027578

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-9150

Report generation functionality in Wyn Enterprise allows for code inclusion, but not sufficiently limits what code might be included. An attacker is able use a low privileges account in order to abuse this functionality and execute malicious code, load DLL libraries and executing OS commands on a...

CVE-2024-9150 Code Injection in Wyn Enterprise

Report generation functionality in Wyn Enterprise allows for code inclusion, but not sufficiently limits what code might be included. An attacker is able use a low privileges account in order to abuse this functionality and execute malicious code, load DLL libraries and executing OS commands on a...

CVE-2024-9150

CVE-2024-9150 affects Wyn Enterprise: the report generation feature allows code inclusion beyond safe bounds, enabling a low-privilege user to abuse the functionality to execute malicious code, load DLLs, and run OS commands on a high-privilege host. The vulnerability arises from insufficient inp...

CVE-2024-13900

creationtimestamp| type| source ---|---|--- 2025-02-21 11:18:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4880 2025-02-21 15:26:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lip4jhf5id2a 2025-02-21 15:35:52+00:00| seen| https://t.me/cvedetector/18651...

britcham.org.sg Open Redirect vulnerability OBB-4027452

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress SVG Support plugin <= 2.5.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin SVG Support versions = 2.5.10...

PT-2025-7579 · Itsourcecode · Itsourcecode Simple Chatbox

Name of the Vulnerable Software and Affected Versions: ITSourcecode Simple ChatBox versions up to 1.0 Description: A vulnerability was found in ITSourcecode Simple ChatBox, affecting unknown code of the file /delete.php. The attack can use SQL injection to obtain sensitive data. Recommendations:...

PT-2025-7455 · Unknown · Wyn Enterprise

Name of the Vulnerable Software and Affected Versions: Wyn Enterprise versions prior to 8.0.00204.0 Description: The report generation functionality in Wyn Enterprise allows for code inclusion but does not sufficiently limit what code might be included. An attacker can use a low-privileges accoun...

Wyn Enterprise 安全漏洞

Wyn Enterprise is an embedded business intelligence and analytics tool from Wyn Enterprise, Inc. A security vulnerability exists in Wyn Enterprise prior to version 8.0.00204.0, which stems from a report generation feature that allows code to be included, but does not adequately restrict the code...

WordPress igumbi Online Booking plugin <= 1.40 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin igumbi Online Booking versions = 1.40...

CVE-2024-7131

creationtimestamp| type| source ---|---|--- 2025-02-20 23:17:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4838 2025-02-21 01:01:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3linm6med622p...

CVE-2025-25676

creationtimestamp| type| source ---|---|--- 2025-02-20 23:17:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4833 2025-02-21 00:55:49+00:00| seen| https://t.me/cvedetector/18613 2025-02-21 19:48:45+00:00| seen|...

GHSA-RR6P-3PFG-562J XWiki Platform allows remote code execution as guest via SolrSearchMacros request

Impact Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the confidentiality, integrity and availability of the whole XWiki installation. To reproduce on an instance, without being logged in, go to...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the Unselectable function. An attacker can obtain sensitive information by exploiting the function's improper handling of data visibility. Remediation There is no fixed version for AutoQueryable.Core. References...

CVE-2024-12284

creationtimestamp| type| source ---|---|--- 2025-02-20 02:16:30+00:00| seen| https://t.me/cvedetector/18487 2025-02-20 02:33:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lilatp35kb2m 2025-02-20 03:36:00+00:00| seen|...

CVE-2024-29125

creationtimestamp| type| source ---|---|--- 2025-02-19 21:02:54+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3likodtii3522...

CVE-2024-27993

creationtimestamp| type| source ---|---|--- 2025-02-19 21:02:50+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3likodsvnz32f...

CVE-2024-53974

creationtimestamp| type| source ---|---|--- 2025-02-19 20:24:51+00:00| seen| https://t.me/cvedetector/18452 2025-02-19 22:06:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likrwss7v72c...

CVE-2025-1118

creationtimestamp| type| source ---|---|--- 2025-02-19 20:24:49+00:00| seen| https://t.me/cvedetector/18449 2025-02-19 22:06:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likrwt4v6o24 2025-02-27 15:29:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5694 2025-05-16...