33311 matches found
ncrjobs.in Cross Site Scripting vulnerability OBB-3844985
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
hk4tutor.com Cross Site Scripting vulnerability OBB-3844711
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Dell iDRAC Improper Session ID Handling (CVE-2014-8272)
The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack. This plugin only works with...
taithouse.ie Improper Access Control vulnerability OBB-3835865
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2014-125107
creationtimestamp| type| source ---|---|--- 2024-01-12 07:41:36+00:00| seen| https://t.me/ctinow/167107...
flaeming-therme.de Cross Site Scripting vulnerability OBB-3830826
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-34328
CVE-2023-34328 relates to Xen where a PV vCPU can place a breakpoint over the live GDT, potentially locking up the CPU. This is described in the CNA as a Xen/AMD x86 debugging state handling issue that can lead to a denial of service. The entry references XSA-156 and CVE-2015-8104 as related cont...
Festo CECX-X-C1 and CECX-X-M1 Improper Authentication (CVE-2014-0760)
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX- X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method involving the FTP protocol, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via...
Festo CECX-X-C1 and CECX-X-M1 Improper Authentication (CVE-2014-0769)
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX- X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to 1 modify the configuration via a request to the debug service on port 4000 ...
CVE-2014-125109
The CVE-2014-125109 entry concerns the BestWebSoft Portfolio Plugin (WordPress) up to version 2.27, specifically the function bws_add_menu_render in bws_menu/bws_menu.php. The vulnerability arises from manipulation of the bwsmn_form_email argument, enabling cross-site scripting (XSS). Exploitatio...
CVE-2014-125108
The CVE-2014-125108 entry concerns w3c online-spellchecker-py (up to 20140130). The vulnerability is a cross-site scripting flaw in processing the spellchecker file, potentially exploitable remotely with high attack complexity and low overall impact (no availability impact, low confidentiality/in...
CVE-2014-125107
CVE-2014-125107 affects Corveda PHPSandbox 1.3.4. The issue is in the String Handler component, leading to protection mechanism failure that could be triggered remotely. A fix is available in PHPSandbox 1.3.5 (patch: 48fde5ffa4d76014bad260a3cbab7ada3744a4cc). Multiple sources (Red Hat, GHSA, OSV,...
elo.gemfw-wennigsen.de Cross Site Scripting vulnerability OBB-3806848
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Security Bulletin: IBM Flex System switch firmware products are affected by information disclosure vulnerability (CVE-2014-8730)
Summary IBM Flex System switch firmware products have addressed the following TLS padding information disclosure vulnerability. Vulnerability Details CVEID: CVE-2014-8730 DESCRIPTION: Multiple F5 products could allow a remote attacker to obtain sensitive information, caused by the failure to chec...
CVE-2014-4210
creationtimestamp| type| source ---|---|--- 2023-12-06 17:56:36+00:00| seen| https://t.me/arpsyndicate/1522 2024-07-18 16:40:25+00:00| published-proof-of-concept| https://t.me/CNArsenal/2807 2024-07-18 20:18:18+00:00| published-proof-of-concept| https://t.me/realLulzSec/13943 2024-07-18...
CVE-2014-4242
creationtimestamp| type| source ---|---|--- 2023-12-06 13:37:27+00:00| seen| https://t.me/arpsyndicate/1491...
CVE-2014-4241
creationtimestamp| type| source ---|---|--- 2023-12-06 13:10:46+00:00| seen| https://t.me/arpsyndicate/1487...
glm-ett-empleo.com Improper Access Control vulnerability OBB-3800146
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2014-4078
creationtimestamp| type| source ---|---|--- 2023-11-22 14:15:18+00:00| seen| Telegram/w2J7UPxEnVtPvHiMQZgcXgfrgvzOOsq-k0QIIOIAAbTGczw 2026-07-29 12:01:19+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:51+00:00| seen|...