22 matches found
CVE-2025-64720
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in pngimagereadcomposite when processing palette images with PNGFLAGOPTIMIZEALP...
miroslava.ucoz.net Cross Site Scripting vulnerability OBB-3792299
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress Booster for WooCommerce Plugin <= 7.1.1 is vulnerable to Sensitive Data Exposure
Software Booster for WooCommerce Type Plugin Vulnerable versions = 7.1.1 Fixed in 7.1.2 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2023-48333 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID b3744065c2d4 Credits Dave Jong...
WordPress Salient Core Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)
Software Salient Core Type Plugin Vulnerable versions = 2.0.2 Fixed in 2.0.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-48749 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ef3d6f0a3d43 Credits Rafie Muhammad Patchstack Required...
umics.ru Cross Site Scripting vulnerability OBB-3069463
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
maxpixel.net Cross Site Scripting vulnerability OBB-3068741
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
fitnesstopractise.cardiff.ac.uk Cross Site Scripting vulnerability OBB-2282492
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cyprus.gov.cy Cross Site Scripting vulnerability OBB-2280680
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
funcarnival.com XSS vulnerability
Open Bug Bounty ID: OBB-702458 Description| Value ---|--- Affected Website:| funcarnival.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
recordpower.eu XSS vulnerability
Open Bug Bounty ID: OBB-702332 Description| Value ---|--- Affected Website:| recordpower.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
portalfinanceiro.seculus.com.br XSS vulnerability
Open Bug Bounty ID: OBB-702085 Description| Value ---|--- Affected Website:| portalfinanceiro.seculus.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...
masada.com.br XSS vulnerability
Open Bug Bounty ID: OBB-702065 Description| Value ---|--- Affected Website:| masada.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
ssupl.com XSS vulnerability
Open Bug Bounty ID: OBB-566194 Description| Value ---|--- Affected Website:| ssupl.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
sendpoints.cn XSS vulnerability
On the 24.11.2017 security researcher reported a XSS vulnerability affecting the sendpoints.cn website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 24 November, 2017...
tudocelular.com XSS vulnerability
Vulnerable URL: https://www.tudocelular.com/newfiles/adserver/adsensepanorama.php?adslot=%22%3E%3Csvg/onload=alert%27OPENBUGBOUNTY%27%3E// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 24.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
frieze.com XSS vulnerability
Vulnerable URL: https://frieze.com/?q=filter/tips/" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 92214 VIP website status:| No Coordinated Disclosure Timeline: Description| Value...
втормет-нк.рф Open Redirect vulnerability
Vulnerable URL: http://втормет-нк.рф/redirect/?service=catalog=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...
chandris-hellas.eu XSS vulnerability
Vulnerable URL: http://www.chandris-hellas.eu/pub/JobOffer.asp?lang=en" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
breckenridge-gallery.com XSS vulnerability
Vulnerable URL: http://www.breckenridge-gallery.com/searchresults.php?artistId=0===%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E&submit2;=Search=1 Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:01 GMT Vulnerability type:...
usagym.org XSS vulnerability
Vulnerable URL: https://usagym.org/pages/find/gym.html Details: Description| Value ---|--- Patched:| Yes, at 19.01.2016 Latest check for patch:| 19.01.2016 18:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 99846 Google Pagerank| 6 VIP website status:| No Che...