342 matches found
turismiweb.ee Cross Site Scripting vulnerability OBB-2339544
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SUSE: Security Advisory (SUSE-SU-2016:2156-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Kaswara Modern VC Addons (0-day) - Unauthenticated Arbitrary File Upload
The plugin allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action. The supplied zipfile being unzipped in the wp-content/uploads/kaswara/fontsicon directory with no checks for malicious files such as PHP. The vendor has been unresponsive to both the reporter and Envato,...
SUSE: Security Advisory (SUSE-SU-2018:1234-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2016:1733-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
YCCMS file upload vulnerability
Yccms is a Php-based lightweight CMS builder from the Yccms team. yccms 3.3 has a file upload vulnerability, which stems from an error in the xhUp function's determination of request parameters and can be exploited by attackers to cause remote code execution...
EulerOS 2.0 SP3 : glibc (EulerOS-SA-2021-1069)
According to the version of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Stack-based buffer overflow in the glob implementation in GNU C Library aka glibc before 2.24, when GLOBALTDIRFUNC is used, allows context-dependent...
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-1069)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Tenda AC1200 Default Credentials Disclosure Vulnerability
The Tenda AC1200 is a wireless router from the Chinese company Tenda. A default credential disclosure vulnerability exists in the Tenda AC1200 Model AC6 15.03.06.51multi, which stems from the fact that admin, support, user, and nobody has a default password of 1234, which can be exploited by an...
CVE-2020-28093
On Tenda AC1200 Model AC6 15.03.06.51multi devices, admin, support, user, and nobody have a password of 1234...
Default credentials
On Tenda AC1200 Model AC6 15.03.06.51multi devices, admin, support, user, and nobody have a password of 1234...
CVE-1234-12345
creationtimestamp| type| source ---|---|--- 2020-12-02 23:34:01+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/examples/examplevulndetector...
f-kitto.com Cross Site Scripting vulnerability OBB-1408083
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
mysiouxcityjobs.com Cross Site Scripting vulnerability OBB-1300483
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
curl: Connect-only connections can use the wrong connection
Summary: If a connect-only easy handle is not read from or written to, its connection can time out and be closed. If a new connection is created it can be allocated at the same address, causing the easy handle to use the new connection. This new connection may not be connected to the same server ...
luxuryspaceibiza.com Cross Site Scripting vulnerability OBB-1238772
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
molinek.cz Cross Site Scripting vulnerability OBB-1232150
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
techdirt.com Cross Site Scripting vulnerability OBB-1231516
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
div2000.com Cross Site Scripting vulnerability OBB-1225961
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
qottaby.jp Cross Site Scripting vulnerability OBB-1205592
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...