Moxa AWK-3131A multiple iw_* utilities Use of Hard-coded Credentials Vulnerability

Summary An exploitable use of hard-coded credentials vulnerability exists in multiple iw utilities of the Moxa AWK-3131A firmware version 1.13. The device operating system contains an undocumented encryption password, allowing for the creation of custom diagnostic scripts. Tested Versions Moxa...

krispet.com.au Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8547 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting krispet.com.au website and its users. Following coordinate...

virale-plr-werbetools.info Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1072607 Security Researcher NasurUllah Helped patch 1 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting virale-plr-werbetools.info website and its users. Following coordinated and responsible vulnerability disclosure...

Metasploit Sample Linux Privilege Escalation Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This exploit sample shows how an exploit module could be written to exploit a bug in a command on a linux computer for priv esc. class MetasploitModule 'Sample Linux Pri...

brassexinc.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1033379 Security Researcher Dipu1A Helped patch 998 vulnerabilities Received 5 Coordinated Disclosure badges Received 21 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting brassexinc.com website and i...

hbrc.govt.nz Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1029392 Security Researcher IAMMUSTAFA Helped patch 521 vulnerabilities Received 9 Coordinated Disclosure badges Received 51 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting hbrc.govt.nz website and...

oem-solutions.ingersollrand.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1022363 Security Researcher CityBoy Helped patch 98 vulnerabilities Received 3 Coordinated Disclosure badges Received 1 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting oem-solutions.ingersollrand.c...

mcpp -- Heap-based buffer overflow

[email protected] reports: MCPP 2.7.2 has a heap-based buffer overflow in the domsg function in support.c...

CVE-2019-12345

CVE-2019-12345 describes a Cross-Site Scripting vulnerability in the WordPress Kiboko Hostel plugin, affecting versions prior to 1.1.4. Multiple connected sources (WPVulndb, CVE trackers, and Red Hat/NVD mirrors) corroborate an XSS flaw in the plugin’s Booking-related UI that can execute client-s...

covermytunes.com XSS vulnerability

Open Bug Bounty ID: OBB-713553 Description| Value ---|--- Affected Website:| covermytunes.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

housemarket.pl XSS vulnerability

Open Bug Bounty ID: OBB-708241 Description| Value ---|--- Affected Website:| housemarket.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

Improper access control

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...

CVE-2018-16224

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...

CVE-2018-16224

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...

billetcid.com XSS vulnerability

Open Bug Bounty ID: OBB-696882 Description| Value ---|--- Affected Website:| billetcid.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

iSmartAlarm Cube One Information Disclosure Vulnerability

The iSmartAlarm Cube One is a smart home center control device from iSmartAlarm USA. An information disclosure vulnerability exists in the diagnostic file in iSmartAlarm Cube One 2.2.4.10 and earlier versions, which stems from the program's failure to perform proper access control, and can be...

muelheim-ruhr.de XSS vulnerability

Open Bug Bounty ID: OBB-684469 Description| Value ---|--- Affected Website:| muelheim-ruhr.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

caemdordini.it XSS vulnerability

Open Bug Bounty ID: OBB-681713 Description| Value ---|--- Affected Website:| caemdordini.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

busvic.asn.au XSS vulnerability

Open Bug Bounty ID: OBB-681690 Description| Value ---|--- Affected Website:| busvic.asn.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

karaokelista.fi Open Redirect vulnerability

Open Bug Bounty ID: OBB-680881 Description| Value ---|--- Affected Website:| karaokelista.fi Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...