b-fine.eu Cross Site Scripting vulnerability OBB-2680698

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-22115

Name of the Vulnerable Software and Affected Versions libdwarf version 0.4.0 Description The issue is a heap-based buffer over-read in libdwarf, related to the dwarf global formref b function. Recommendations For libdwarf version 0.4.0, at the moment, there is no information about a newer version...

Malicious code in page-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c160990eea879201a1e564d8dbf6e0fa9871f0eaaa38b2f4d45e379e45820a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5188 Malicious code in page-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c160990eea879201a1e564d8dbf6e0fa9871f0eaaa38b2f4d45e379e45820a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in privateinternal-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d23dff67dda9c294da32907a5dbdb9e6c3b1b571bc8abe4f0aca5fe4304699f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5465 Malicious code in privateinternal-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d23dff67dda9c294da32907a5dbdb9e6c3b1b571bc8abe4f0aca5fe4304699f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-31062

Impact A plugin public script can be used to read content of system files. Patches Upgrade to version 1.0.2. Workarounds "b/deploy/index.php" file can be deleted if deploy feature is not used...

CVE-2022-31062: Improper Limitation of a Pathname to a Restricted Directory

Impact A plugin public script can be used to read content of system files. Patches Upgrade to version 1.0.2. Workarounds b/deploy/index.php file can be deleted if deploy feature is not used...

WhatsApp spam offers up “B&Q Father’s Day Contest 2022”

Fathers Day in the UK June 19 is almost upon us, and scammers are taking advantage of it—and the fractional possibility of some nice weather—using a barbeque-themed lure. A mysterious WhatsApp message The barbeque bait arrives out of the blue, from a somebody who has your number, as a random...

HPESBUX04323 rev.1 - HP-UX Common Internet File System (CIFS), Multiple Vulnerabilities

Potential Security Impact: Local: Compromise of System Integrity, Escalation of Privilege, Unauthorized Access, Unauthorized Disclosure of Information, Authentication Restriction Bypass; Remote: Compromise of System Integrity, Escalation of Privilege, Unauthorized Disclosure of Information,...

SQL Injection Vulnerability in Easy Attendance WEB Attendance Management Software

Easy Attendance WEB attendance management software is a network version of the B / S architecture WEB attendance management software. Eqin WEB Attendance Management Software has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Malicious code in simple-project-pkg-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36656e6b75ae254df7a6e2a5d6664fe017a1357d328c429930e852e963f4dca3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2017-16671

A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. No size checking is done when setting the user field for Party B on a CDR. Thus, it is possible for someone to use an arbitrari...

GeniXCMS Cross-site Scripting (XSS)

GeniXCMS 1.0.2 has XSS triggered by an authenticated user who submits a page, as demonstrated by a crafted oncut attribute in a B element...

CVE-2021-22275

Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of service...

Buffer overflow

Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of service...

CVE-2021-22275

CVE-2021-22275 describes a Buffer Overflow in the B&R Automation Runtime webserver that can be triggered by an unauthenticated, network-based attacker to stop the device’s cyclic program and cause a denial of service. Documents associated with this CVE indicate the vulnerability arises from impro...

PT-2022-9232

Name of the Vulnerable Software and Affected Versions B&R Automation Runtime affected versions not specified Description A Buffer Overflow issue in the B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device, causing a denial of...

CVE-2021-22275: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of service...

B&R Automation Runtime 安全漏洞

B&R Automation Runtime is a major component of AS from B&R Automation, an Austrian company. A security vulnerability exists in B&R Automation Runtime versions prior to 4.91 that stems from improper buffer limits in the web server. Exploitation of the vulnerability by an unauthenticated attacker...