cleanwatersolutionsca.com Improper Access Control vulnerability OBB-3795796

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Modern Attack Surface Management for Cloud Teams

Today’s attack surface requires modern processes and security solutions. Explore the tenants of modern attack surface management ASM and what Cloud teams need to look for in an ASM solution...

cargo-bee-solutions.com Improper Access Control vulnerability OBB-3795077

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

timberframesolutions.ca Improper Access Control vulnerability OBB-3792127

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-21935 · Creativemindssolutions · Cm On Demand Search/Replace

Name of the Vulnerable Software and Affected Versions: CreativeMindsSolutions CM On Demand Search And Replace plugin versions prior to 1.3.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to perform unintended...

Open Solutions For Education openSIS Security Vulnerability

Open Solutions For Education openSIS is an open source student information management system from Open Solutions For Education, Inc. A security vulnerability exists in Open Solutions For Education openSIS Classic Community Edition version v9.0, which stems from the presence of a cross-site reques...

Discover 2023's Cloud Security Strategies in Our Upcoming Webinar - Secure Your Spot

In 2023, the cloud isn't just a technology—it's a battleground. Zenbleed, Kubernetes attacks, and sophisticated APTs are just the tip of the iceberg in the cloud security warzone. In collaboration with the esteemed experts from Lacework Labs, The Hacker News proudly presents an exclusive webinar:...

Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2024-00199)

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...

Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2024-00198)

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...

Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2023-101676)

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...

CVE-2023-47554

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in DenK BV Actueel Financieel Nieuws – Denk Internet Solutions plugin = 5.1.0 versions...

PT-2023-30505

Name of the Vulnerable Software and Affected Versions DenK BV Actueel Financieel Nieuws – Denk Internet Solutions plugin versions = 5.1.0 Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations For De...

WordPress Plugin Actueel Financieel Nieuws - Denk Internet Solutions Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.WordPress plugin i...

CVE-2023-47554: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in DenK BV Actueel Financieel Nieuws – Denk Internet Solutions plugin = 5.1.0 versions...

CVE-2022-45835

Server-Side Request Forgery SSRF vulnerability in PhonePe PhonePe Payment Solutions.This issue affects PhonePe Payment Solutions: from n/a through 1.0.15...

CVE-2022-45835

The CVE-2022-45835 entry concerns the WordPress PhonePe Payment Solutions plugin, affected through version 1.0.15. The vulnerability is Server-Side Request Forgery (SSRF) that allows an attacker to have the server make requests to arbitrary domains, potentially exposing internal resources or enab...

CVE-2022-45835 WordPress PhonePe Payment Solutions Plugin <= 1.0.15 is vulnerable to Server Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in PhonePe PhonePe Payment Solutions.This issue affects PhonePe Payment Solutions: from n/a through 1.0.15...

CVE-2022-45835 WordPress PhonePe Payment Solutions Plugin <= 1.0.15 is vulnerable to Server Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in PhonePe PhonePe Payment Solutions.This issue affects PhonePe Payment Solutions: from n/a through 1.0.15...

WordPress Plugin PhonePe Payment Solutions Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

PT-2023-14775 · Phonepe · Phonepe Payment Solutions

Name of the Vulnerable Software and Affected Versions: PhonePe Payment Solutions versions 1.0.0 through 1.0.15 Description: A Server-Side Request Forgery SSRF issue affects PhonePe Payment Solutions. This issue allows for potential unauthorized access to internal systems. Recommendations: For...