13829 matches found
rsananda.com Cross Site Scripting vulnerability OBB-3941323
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
prepfootballreport.com.xx3.kz Cross Site Scripting vulnerability OBB-3941237
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
danieldowtree.tribalpages.com Cross Site Scripting vulnerability OBB-3941215
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress Ultimate Auction Plugin <= 4.2.5 is vulnerable to Cross Site Request Forgery (CSRF)
Software Ultimate Auction Type Plugin Vulnerable versions = 4.2.5 Fixed in 4.2.6 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37543 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ed8502cd34a3 Credits Majed Refaea...
CentOS SEoL (6.x)
According to its version, CentOS is 6.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable, Inc...
CVE-2023-5156 affecting package glibc for versions less than 2.38-6
CVE-2023-5156 affecting package glibc for versions less than 2.38-6. A patched version of the package is available...
MongoDB Missing Authorization Check Vulnerability (SERVER-79327) - Linux
MongoDB is prone to a missing authorization check vulnerability in refine collection shard key. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MongoDB Missing Authorization Check Vulnerability (SERVER-79327) - Windows
MongoDB is prone to a missing authorization check vulnerability in refine collection shard key. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Exploit for Use After Free in Arm Avalon_Gpu_Kernel_Driver
Exploit for CVE-2022-46395 The write up can be found here...
Exploit for Improper Input Validation in Google Android
Exploit for CVE-2022-20186 The write up can be found here...
CVE-2024-39209
luci-app-sms-tool v1.9-6 was discovered to contain a command injection vulnerability via the score parameter...
PT-2024-28389 · Unknown · Luci-App-Sms-Tool
Name of the Vulnerable Software and Affected Versions: luci-app-sms-tool version 1.9-6 Description: A command injection issue was found in luci-app-sms-tool via the score parameter. Recommendations: For luci-app-sms-tool version 1.9-6, avoid using the score parameter until a fix is available...
SUSE SLES15 Security Update : kernel (Live Patch 6 for SLE 15 SP5) (SUSE-SU-2024:2221-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:2221-1 advisory. This update for the Linux Kernel 5.14.21-1505005531 fixes one issue. The following security issue was fixed: - CVE-2024-26852: Fixed use-after-free in...
MAL-2024-5860 Malicious code in req6 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in where-scream-6-movie-online-frees (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3953 Malicious code in where-scream-6-movie-online-frees (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3931 Malicious code in watching-scream-6-movie-stream-online-for-at-home (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3929 Malicious code in watch_scream_6_fullmovies_online_on_streaming (npm)
--- -= Per source details. Do not edit below this line.=-...