s-real.vn Cross Site Scripting vulnerability OBB-2717179

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

s-99.com Cross Site Scripting vulnerability OBB-2692663

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-31761

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue concerns the ext4 file system, specifically with filtering out EXT4 FC REPLAY from the on-disk superblock field s state. The actual impact and attack plausibility have not yet been...

S-Bus Protocol Disclosure

The vulnerability of the S-Bus protocol implementation in microprogrammed programmable logic controllers PCD controllers is related to the use of a non-safe hash algorithm for password hashing. Exploiting this vulnerability could allow an attacker to disclose the protected information...

S-Bus Protocol Privilege Escalation

The vulnerability of the S-Bus protocol implementation in microprogrammed programmable logic controllers PCD controllers is related to errors in processing the “white list”. Exploiting this vulnerability can allow an attacker to bypass the restrictions of the “white list” and enhance their...

Authentication flaw

Improper Authentication vulnerability in S&D smarthomesmartcare application can cause authentication bypass and information exposure. Remote attackers can use this vulerability to take control of the home environment including indoor control...

Debian: Security Advisory (DLA-3056-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-26638

Technical details for CVE-2021-26638 are not publicly available in the provided documents. Monitor for updates from linked sources before drawing conclusions about affected products, impact, or remediation.

PT-2022-9786

Name of the Vulnerable Software and Affected Versions S&D smarthome smartcare application affected versions not specified Description The issue concerns an improper authentication flaw that can lead to authentication bypass and information exposure. This allows remote attackers to potentially tak...

PT-2022-3081 · Saia Burgess Controls · Pcd

Name of the Vulnerable Software and Affected Versions: Saia Burgess Controls SBC PCD through 2022-05-06 Description: The issue is related to the use of an insecure algorithm for hashing passwords in the S-Bus protocol implementation of the Saia Burgess Controls SBC PCD controllers. This allows an...

PT-2022-3082 · Saia Burgess Controls · Saia Burgess Controls Pcd

Name of the Vulnerable Software and Affected Versions: Saia Burgess Controls SBC PCD through 2022-05-06 Description: The issue concerns an authentication bypass in the S-Bus protocol used by Saia Burgess Controls SBC PCD controllers. The S-Bus protocol, which operates on UDP port 5050, is utilize...

PT-2022-3157 · Emerson · Emerson Deltav Distributed Control System

Name of the Vulnerable Software and Affected Versions: Emerson DeltaV Distributed Control System DCS controllers and IO cards through 2022-04-29 Description: The issue is related to the misuse of passwords and the presence of hardcoded credentials in the FTP service of the Emerson DeltaV...

CVE-2021-26638: Improper Authentication

Improper Authentication vulnerability in S&D smarthomesmartcare application can cause authentication bypass and information exposure. Remote attackers can use this vulerability to take control of the home environment including indoor control...

MAL-2022-5894 Malicious code in s-telekom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf6db44df6f8b300c9997222ef95d5fcc7fb02fab52d16fdd251371fc0a63616 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in s-telekom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf6db44df6f8b300c9997222ef95d5fcc7fb02fab52d16fdd251371fc0a63616 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

SAP startservice - of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP Platform and HANA Database - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, SAPHOSTAGENT 7.22, - on Unix systems,...

CVE-2022-29614

Summary: CVE-2022-29614 describes a local privilege-escalation vulnerability in the SAP startservice s-bit helper sapuxuserchk on Unix systems, affecting SAP NetWeaver AS ABAP, Application Server Java, ABAP Platform and HANA Database. The issue is triggered by physical access and can lead to priv...

多款SAP产品安全漏洞

SAP ERP and others are products of SAP, a German company.SAP ERP is a series of software for ERP management.SAP Financials is a financial system.SAP S/4Hana Core is a complete and modular cloud ERP software.SAP ERP, SAP Financials, and SAP S/4Hana Core are products of SAP, a German company. A...

CVE-2022-1707: Improper Neutralization of Input During Web Page Generation

The Google Tag Manager for WordPress plugin for WordPress is vulnerable to reflected Cross-Site Scripting via the s parameter due to the site search populating into the data layer of sites with insufficient sanitization in versions up to an including 1.15. The affected file is /public/frontend.ph...

Qualcomm 芯片代码问题漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and are from time to time fabricated on the surface of semiconductor wafers. A code issue vulnerability exists in various Qualcomm products that...