12955 matches found
heiwasol.de Cross Site Scripting vulnerability OBB-3906956
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
sonographycanada.ca Cross Site Scripting vulnerability OBB-3906947
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
wellnessfortherestofus.com Cross Site Scripting vulnerability OBB-3906812
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
tulsatrailriders.com Cross Site Scripting vulnerability OBB-3906793
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
tecsq.com Cross Site Scripting vulnerability OBB-3906779
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
olimp03.ru Cross Site Scripting vulnerability OBB-3906691
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
AZL-44382 CVE-2024-31083 affecting package xorg-x11-server 1.20.10-6
A use-after-free vulnerability was found in the ProcRenderAddGlyphs function of Xorg servers. This issue occurs when AllocateGlyph is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently,...
This Week in Spring - April 2nd, 2024
Welcome, welcome, welcome, to another installment of This Week in Spring! You know, we've come a long way since you and I last spoke. It's April already! A new month! How bizarre. And, with the dawning of a new month, we're also more than 25% through this year! I sure hope you're paying attention...
Adobe ColdFusion < 2021 Update 12 / < 2023 Update 6 Cross-Site Scripting
Adobe ColdFusion prior to versions 2021 Update 12 or 2023 Update 6, suffer from a Cross-Site Scripting vulnerability through a specially forged URL. No source data...
PT-2024-2453
Name of the Vulnerable Software and Affected Versions Mikrotik RouterOS x86 versions 6.40.5 through 6.49.10 Description An issue in the processing of input data allows a remote attacker to cause a denial of service, resulting in a device crash. This is achieved by sending crafted packet data to t...
CVE-2024-30246
CVE-2024-30246 affects Tuleap Community Edition before 15.7.99.6 and Tuleap Enterprise Edition before 15.7-2, 15.6-5, 15.5-6, 15.4-8, 15.3-6, 15.2-5, 15.1-9, 15.0-9, 14.12-6. The vulnerability lets a malicious user delete information on the instance and may lead to disclosure of restricted artifa...
CVE-2024-30246 Tuleap deleting or moving an artifact can delete values from unrelated artifacts
Tuleap is an Open Source Suite to improve management of software developments and collaboration. A malicious user could exploit this issue on purpose to delete information on the instance or possibly gain access to restricted artifacts. It is however not possible to control exactly which...
A Bootiful Podcast: Joseph Ottinger and Andrew Lombardi on "Beginning Spring 6"
Hi, Spring fans! In this episode I'm joined by Java luminaries and Apress' Beginning Spring 6 authors Joseph Ottinger and Andrew Lombardi...
CVE-2023-45935
Qt 6 through 6.6 was discovered to contain a NULL pointer dereference via the function QXcbConnection::initializeAllAtoms. NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server...
CVE-2023-45935
Qt 6.x (Qt 6 through 6.6) is affected by a NULL pointer dereference in QXcbConnection::initializeAllAtoms(), which can impact availability. This aligns with Red Hat/SUSE advisories: fixes are provided in the SUSE/SUSE-SU-2024:2946-1 family and related advisories, and OSV records list CVE-2023-459...
Virtuozzo Hybrid Server 7.5 Update 6 Hotfix 2 (7.5.6-117)
The Hotfix 2 for Virtuozzo Hybrid Server 7.5 Update 6 introduces a new feature...
Exploit for Improper Access Control in Adobe Coldfusion
CVE-2024-20767 Exploit for Adobe ColdFusion 🛠️ This repositor...
Adobe ColdFusion < 2021 Update 12 / < 2023 Update 6 Remote Code Execution
Adobe ColdFusion prior to versions 2021 Update 12 or 2023 Update 6, suffer from an Insecure Deserialization vulnerability through the argumentCollection parameter on /CFIDE/wizards/common/utils.cfc endpoint. By leveraging this vulnerability, a remote unauthenticated attacker could achieve a remot...
CVE-2024-30156
Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 and before 6.0.13 LTS, and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack...
