CVE-2016-0796: Improper Authentication

WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files is prone to multiple vulnerabilities, including open proxy and security bypass vulnerabilities because it fails to properly verify user-supplied input. An attacker may leverage these issues to hide attacks directed at a...

an-electrorecycling.de Cross Site Scripting vulnerability OBB-2688304

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Zoo Management System 跨站脚本漏洞

Zoo Management System is a zoo management system. v1.0 of Zoo Management System has a cross-site scripting vulnerability, which originates from zms/admin/publichtml/saveanimal?anid=24 vulnerability. An attacker could exploit this vulnerability to conduct cross-site scripting attacks...

an-diag.fr Cross Site Scripting vulnerability OBB-2627988

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-42J3-498Q-M6VP Improper Input Validation in Apache Tomcat

java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks...

Powershell Exec, Hidden Bind TCP Stager

Execute an x86 payload from a command via PowerShell. Listen for a connection from a hidden port and spawn a command shell to the allowed host. Module Options msf use payload/cmd/windows/powershell/dllinject/bindhiddentcp msf payloadbindhiddentcp show actions ...actions... msf payloadbindhiddentc...

PT-2022-10219

Name of the Vulnerable Software and Affected Versions MashZone NextGen versions through 10.7 GA Description The issue allows XXE attacks via a malicious XML configuration file, specifically through the "Register an Ehcache Configuration File" admin feature. Recommendations For MashZone NextGen...

CVE-2021-33208: Improper Restriction of XML External Entity Reference

The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA allows XXE attacks via a malicious XML configuration file...

an-bereg.com Cross Site Scripting vulnerability OBB-2452265

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cisco Nexus 9000 Series Switches Bidirectional Forwarding Detection DoS (cisco-sa-nxos-bfd-dos-wGQXrzxn)

According to its self-reported version, Cisco NX-OS Software for Cisco Nexus 9000 Series Switches is affected by a denial of service vulnerability. The vulnerability exists in the rate limiter for Bidirectional Forwarding Detection BFD traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series...

hire-an-umbrella.com.au Cross Site Scripting vulnerability OBB-2375812

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Ubuntu: Security Advisory (USN-5267-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-16439

Name of the Vulnerable Software and Affected Versions Sante DICOM Viewer Pro version 11.8.7.0 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. Th...

PT-2022-12852

Name of the Vulnerable Software and Affected Versions Bentley MicroStation CONNECT version 10.16.0.80 Description This issue allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this issue, where the...

PT-2022-12874

Name of the Vulnerable Software and Affected Versions Bentley MicroStation CONNECT version 10.16.0.80 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...

PT-2022-12800

Name of the Vulnerable Software and Affected Versions Bentley MicroStation CONNECT version 10.16.0.80 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...

PT-2022-12812

Name of the Vulnerable Software and Affected Versions Bentley MicroStation CONNECT version 10.16.0.80 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...

PT-2022-12814

Name of the Vulnerable Software and Affected Versions Bentley MicroStation CONNECT version 10.16.0.80 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...

PT-2022-12801

Name of the Vulnerable Software and Affected Versions Bentley MicroStation CONNECT version 10.16.0.80 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...

CVE-2021-43394: Improper Authentication

Unisys OS 2200 Messaging Integration Services NTSI 7R3B IC3 and IC4, 7R3C, and 7R3D has an Incorrect Implementation of an Authentication Algorithm. An LDAP password is not properly validated...