2312 matches found
laica.hu Cross Site Scripting vulnerability OBB-3632428
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-4708
creationtimestamp| type| source ---|---|--- 2023-09-01 22:14:06+00:00| seen| https://t.me/cibsecurity/69687...
lifendrink.com Cross Site Scripting vulnerability OBB-3630394
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
licard-liberec.cz Cross Site Scripting vulnerability OBB-3630359
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ecoursethailand.com Cross Site Scripting vulnerability OBB-3630158
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-39354
creationtimestamp| type| source ---|---|--- 2023-09-01 00:13:17+00:00| seen| https://t.me/cibsecurity/69599...
WordPress WP Bannerize Pro Plugin <= 1.6.9 is vulnerable to Cross Site Scripting (XSS)
Software WP Bannerize Pro Type Plugin Vulnerable versions = 1.6.9 Fixed in 1.7.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41663 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 77839e376c07 Credits thiennv Required...
WordPress WP Migration Plugin DB & Files – WP Synchro Plugin <= 1.9.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software WP Migration Plugin DB & Files – WP Synchro Type Plugin Vulnerable versions = 1.9.1 Fixed in 1.10.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-41660 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0d4cb791a23...
Essential Insights on Google Cloud Backup and Disaster Recovery Service
By Owais Sultan The Google Cloud Backup and Disaster Recovery DR service was introduced in September 2022, which enables centralized management… This is a post from HackRead.com Read the original post: Essential Insights on Google Cloud Backup and Disaster Recovery Service...
PT-2023-5066 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions prior to the September 2023 security updates Description: The issue is related to a logic error in the code of WindowState.java, specifically in the onCreate method, which can lead to local escalation of privilege with no...
CVE-2022-27170
Protection mechanism failure in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-35883
NULL pointer dereference in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable denial of service via local access...
Conti Team One Splinter Group Resurfaces as Royal Ransomware with Callback Phishing Attacks
From September to December, we detected multiple attacks from the Royal ransomware group. In this blog entry, we discuss findings from our investigation of this ransomware and the tools that Royal ransomware actors used to carry out their attacks...
Fixed in Apache Tomcat 8.5.84
Low: Apache Tomcat JsonErrorReportValve injection CVE-2022-45143 The JsonErrorReportValve did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or...
PT-2022-25074 · Samsung · Exynos Modem
Name of the Vulnerable Software and Affected Versions: Exynos modems versions prior to SMR Sep-2022 Release Description: The issue is related to an improper input validation vulnerability for processing SIB12 PDU in Exynos modems. This allows a remote attacker to read out of bounds memory...
167,000 stolen credit card numbers Exposed via PoS Malware
By Waqas The campaign was discovered in April 2022, but researchers believe the campaign occurred between February 2021 and September 8, 2022. This is a post from HackRead.com Read the original post: 167,000 stolen credit card numbers Exposed via PoS Malware...
The Global DDoS Threat Landscape – October 2022
Every month in this space, we will post the Global DDoS Threat Landscape blog on behalf of the Imperva Threat Research team. As DDoS attacks continue to pose a significant risk to businesses it is critical that we regularly communicate our Threat Research team’s findings to help the cybersecurity...
Summary of Vulnerabilities & Threats: September 2022
...
Researchers Reveal Detail for Windows Zero-Day Vulnerability Patched Last Month
Details have emerged about a now-patched security flaw in Windows Common Log File System CLFS that could be exploited by an attacker to gain elevated permissions on compromised machines. Tracked as CVE-2022-37969 CVSS score: 7.8, the issue was addressed by Microsoft as part of its Patch Tuesday...
