5859 matches found
FortiMail - Unsafe handling of CGI environment parameters in web server framework
An improper input validation CWE-20 vulnerability in the web server CGI facilities of FortiMail may allow an unauthenticated attacker to alter the environment of the underlying script interpreter via specifically crafted HTTP requests...
CVE-2020-10635 ICSA-20-098-05 KUKA.Sim Pro Improper Enforcement of Message Integrity During Transmission in a Communication Channel
Simulation models for KUKA.Sim Pro version 3.1 are hosted by a server maintained by KUKA. When these devices request a model, the server transmits the model in plaintext...
CVE-2021-46699
creationtimestamp| type| source ---|---|--- 2022-02-22 20:12:43+00:00| seen| https://t.me/cibsecurity/37894...
CVE-2021-27753
creationtimestamp| type| source ---|---|--- 2022-02-21 20:11:40+00:00| seen| https://t.me/cibsecurity/37872...
CVE-2022-23054
creationtimestamp| type| source ---|---|--- 2022-02-20 22:40:42+00:00| seen| https://t.me/cibsecurity/37853...
CVE-2022-23848
creationtimestamp| type| source ---|---|--- 2022-02-20 22:40:38+00:00| seen| https://t.me/cibsecurity/37851...
CVE-2022-23053
creationtimestamp| type| source ---|---|--- 2022-02-20 22:40:31+00:00| seen| https://t.me/cibsecurity/37848...
nyss.it Cross Site Scripting vulnerability OBB-2381523
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-45007
creationtimestamp| type| source ---|---|--- 2022-02-20 14:40:17+00:00| seen| https://t.me/cibsecurity/37846...
divineconnection.it Cross Site Scripting vulnerability OBB-2381081
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
danielerosa.it Cross Site Scripting vulnerability OBB-2381044
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
triomecitalia.it Cross Site Scripting vulnerability OBB-2380490
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
romacredito.it Cross Site Scripting vulnerability OBB-2380157
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
heli.nu Cross Site Scripting vulnerability OBB-2380122
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Solaris/SPARC - setuid(0) + chmod (/bin/ksh) + exit(0) Shellcode
/ sparcsolarischmod.c - Solaris/SPARC chmod shellcode Copyright c 2022 Marco Ivaldi Solaris/SPARC setuid/chmod/exit shellcode. Tested on: SunOS 5.10 GenericVirtual sun4u sparc SUNW,SPARC-Enterprise / char sc = / Solaris/SPARC chmod shellcode 12 + 32 + 20 = 64 bytes / / setuid0 / "\x90\x08\x3f\xff...
Schneider Electric Modicon Improper Input Validation (CVE-2021-22800)
A CWE-20: Improper Input Validation vulnerability exists that could cause a Denial of Service when a crafted packet is sent to the controller over network port 1105/TCP. Affected Product: Modicon M218 Logic Controller V5.1.0.6 and prior This plugin only works with Tenable.ot. Please visit...
CVE-2022-23202
creationtimestamp| type| source ---|---|--- 2022-02-16 20:42:31+00:00| seen| https://t.me/cibsecurity/37614...
CVE-2022-22770
creationtimestamp| type| source ---|---|--- 2022-02-15 20:35:28+00:00| seen| https://t.me/cibsecurity/37509...