113 matches found
opening-times.co.uk Cross Site Scripting vulnerability OBB-3227774
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Tenda AC23 Stack Overflow Vulnerability (CNVD-2023-15701)
Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. The Tenda AC23 suffers from a buffer error vulnerability that originates from a stack overflow in the schedStartTime parameter of the setSchedWifi function. An attacker can exploit this vulnerability to run arbitrary code in the...
telenet.ba Cross Site Scripting vulnerability OBB-2977297
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
albodos.org Cross Site Scripting vulnerability OBB-2937207
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
osaka-ohsho.com Cross Site Scripting vulnerability OBB-2864192
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
farbe-und-stil.de Improper Access Control vulnerability OBB-2410714
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
dj.resourcez.com Cross Site Scripting vulnerability OBB-2372467
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SiPass Integrated Access Control Vulnerability
SiPass integrated is an access control system. With the SiPass integrated access control vulnerability, an affected application does not adequately restrict access to the internal message broker system. An attacker could exploit the vulnerability to subscribe to arbitrary message queues...
CVE-2021-42543
The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, system reboot, and system shutdown...
stara.pzdw.pl Cross Site Scripting vulnerability OBB-2206836
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-33732
A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...
CVE-2021-33733
A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...
Cisco SD-WAN vManage 代码问题漏洞
Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. A code issue vulnerability exists in Cisco SD-WAN vManage Software, which could be exploited by an attacker to read or write files in an...
Apache Struts Security Update (S2-036)
Apache Struts is prone to a remote code execution RCE vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
isikototransfer.com Cross Site Scripting vulnerability OBB-1491653
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
i3mainz.de Cross Site Scripting vulnerability OBB-1347550
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
XStream Library Insecure Deserialization (CVE-2019-10173)
An insecure serialization vulnerability exists in XStream Library. The vulnerability is due to insufficient validation of event handler type in user-supplied XML data. A remote attacker could exploit this vulnerability by sending specially crafted XML file to the affected application. Successful...
Oracle Outside In Excel Remote Code Execution (CVE-2018-3010)
An out-of-bounds write vulnerability exists in Oracle Outside-In. This vulnerability is due to improper handling of a PropertySetStream stream of an Excel document. Successful exploitation of this vulnerability could lead to arbitrary code execution in the context of the affected application...
partyamt.de XSS vulnerability
Open Bug Bounty ID: OBB-691707 Description| Value ---|--- Affected Website:| partyamt.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...
Google Android System Component Remote Code Execution Vulnerability (CNVD-2018-06644)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in the Google Android System component. An attacker can exploit the vulnerability to execute arbitrary code in the context of an...