CVE-2023-6553

creationtimestamp| type| source ---|---|--- 2023-12-12 17:10:05+00:00| seen| https://t.me/truesecator/5192 2023-12-14 07:38:31+00:00| published-proof-of-concept| https://t.me/proxybar/1866 2023-12-15 07:34:50+00:00| published-proof-of-concept| https://t.me/darkcommunityofficial/193 2023-12-15...

lavastudio.de Improper Access Control vulnerability OBB-3778881

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ergonomio.de Improper Access Control vulnerability OBB-3770367

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lavoripubblici.it Improper Access Control vulnerability OBB-3769832

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

domingoshowroom.com Cross Site Scripting vulnerability OBB-3755023

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

daviderizzofotografo.it Cross Site Scripting vulnerability OBB-3570877

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

comtecom.com Cross Site Scripting vulnerability OBB-2982290

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

artitekturm.de Cross Site Scripting vulnerability OBB-2305562

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

10Web Map Builder for Google Maps < 1.0.70 - Authenticated Stored XSS

The plugin does not validate or escape its MAP API Key, Center Address, Center Lat, Center Lng and Zoom Level settings in the admin dashboard, allowing high privilege users such as admin to use JavaScript payload in them, leading to Stored Cross-Site Scripting issues even when the unfilteredhtml...

CVE-2020-3580

creationtimestamp| type| source ---|---|--- 2021-04-29 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=577 2021-06-24 13:34:08+00:00| published-proof-of-concept| https://t.me/ptswarm/48 2021-06-25 18:25:12+00:00| exploited| https://t.me/cibsecurity/25709 2021-06-26...

sanchae.co.kr Cross Site Scripting vulnerability OBB-1447413

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2016-0165

creationtimestamp| type| source ---|---|--- 2020-10-09 13:19:59+00:00| seen| MISP/fbff27c0-f30f-445c-92af-76781df1856d 2021-11-08 08:58:18+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2023-06-22 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-06-27 09:16:48+00:00|...

keea.info Cross Site Scripting vulnerability OBB-1344544

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

weizmannforex.com XSS vulnerability

Open Bug Bounty ID: OBB-708522 Description| Value ---|--- Affected Website:| weizmannforex.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

gruene-hildesheim.de XSS vulnerability

Open Bug Bounty ID: OBB-610342 Description| Value ---|--- Affected Website:| gruene-hildesheim.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

topbargains.com.au XSS vulnerability

Open Bug Bounty ID: OBB-459690 Description| Value ---|--- Affected Website:| topbargains.com.au Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

pinkemailmarketing.com XSS vulnerability

Open Bug Bounty ID: OBB-385776 Description| Value ---|--- Affected Website:| pinkemailmarketing.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ptgoldensun.com XSS vulnerability

Vulnerable URL: https://www.ptgoldensun.com/detprod.php?lang=%22%3E%3CScRipT%3Ealert%27OPENBUGBOUNTY%27%3C%2FScrIpT%3E%22&prod=LG300-EN Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

WordPress Private Messages 1.0.1 Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WP Email Users – 1.4.1 – Plugin WordPress – Sql Injection Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/wp-email-users/ Software Link: https://wordpress.org/plugins/wp-email-users/ Contact:...

Linux af_packet.c race condition (local root) (CVE-2016-8655)

To create AFPACKET sockets you need CAPNETRAW in your network namespace, which can be acquired by unprivileged processes on systems where unprivileged namespaces are enabled Ubuntu, Fedora, etc. It can be triggered from within containers to compromise the host kernel. On Android, processes with...