A survey of FedRAMP’s new supply chain requirements

Over the past few years, supply chain management has shifted from a background requirement that everyone unknowingly relies upon, to being a commonly talked about aspect of our everyday lives. The Federal government has ramped up its effort to gain a handle on supply chain threats as a result of...

GHSA-4PRH-GQW8-RGH5 Apache Tomcat Directory Traversal

Directory traversal vulnerability in Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules modproxy, modrewrite, modjk, allows remote attackers to read arbitrary files via a .. dot dot sequence with combinations of 1 / slash, 2 \ backslash, and 3 URL-encoded backslash %...

[SECURITY] Fedora 34 Update: golang-github-coredns-corefile-migration-1.0.11-5.fc34

Library and tools for migrating the CoreDNS corefile...

[SECURITY] Fedora 34 Update: golang-github-envoyproxy-protoc-gen-validate-0.4.1-5.fc34

Protoc plugin to generate polyglot message validators...

[SECURITY] Fedora 35 Update: golang-github-redteampentesting-monsoon-0.6.0-5.fc35

Fast HTTP enumerator...

Rockwell Automation ISaGRAF5 Runtime Relative Path Traversal (CVE-2020-25176)

Some commands used by the Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x eXchange Layer IXL protocol perform various file operations in the file system. Since the parameter pointing to the file name is not checked for reserved characters, it is possible for a remote, unauthenticated...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM InfoSphere Global Name Management (CVE-2019-2769, CVE-2019-2762, CVE-2019-2816).

Summary There are multiple vulnerabilities in the IBM Java SDK that is used by IBM WebSphere Application Server shipped as part of IBM InfoSphere Global Name Management. Vulnerability Details Refer to the security bulletinss listed in the Remediation/Fixes section Affected Products and Versions...

5.truesocks.net Cross Site Scripting vulnerability OBB-2535661

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-26413

The CVE-2022-26413 issue affects Zyxel VMG3312-T20A devices, where a command injection in the CGI program (firmware 5.30(ABFX.5)C0) could allow a local authenticated attacker to run arbitrary OS commands via the LAN interface. Red Hat's advisory confirms the same vulnerability, reinforcing that a...

CVE-2021-22898 affecting package curl for versions less than 7.76.0-5

CVE-2021-22898 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...

CVE-2021-22925 affecting package curl for versions less than 7.76.0-5

CVE-2021-22925 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...

CVE-2021-22897 affecting package curl for versions less than 7.76.0-5

CVE-2021-22897 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...

CVE-2021-22923 affecting package curl for versions less than 7.76.0-5

CVE-2021-22923 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...

CVE-2021-22901 affecting package curl for versions less than 7.76.0-5

CVE-2021-22901 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...

mail.saaecarmodeminas.mg.gov.br Cross Site Scripting vulnerability OBB-2473044

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pharmacist.showa-mj.jp Cross Site Scripting vulnerability OBB-2472820

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

onsgebied.nl Cross Site Scripting vulnerability OBB-2472818

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ioncreanga-cj.ebibliophil.ro Cross Site Scripting vulnerability OBB-2472794

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

apps.ndtv.com Cross Site Scripting vulnerability OBB-2472608

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

onshop.am Cross Site Scripting vulnerability OBB-2471849

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...