164 matches found
Botble’s various products have cross-site scripting vulnerabilities
Botble TransP is a product of the Vietnam-based Botble company. Botble TransP is a system designed for logistics, express delivery, and freight management. Botble Athena is a content management platform. Botble Martfury is a multi-merchant e-commerce system. Several products of Botble have...
PT-2026-3554
HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to '/search' using the 'q' parameter...
cobalt-aws (>=0.2.0 <=0.7.0) potentially affected by unknown CVE via aws-sdk-athena (>=0.13.0 <=0.9.0)
aws-sdk-athena CARGO version =0.13.0, =0.2.0, =0.7.0 Source cves: unknown CVE Source advisory: OSV:GHSA-G59M-GF8J-GJF5...
EUVD-2019-6727
Malware in sbrugna...
CVE-2022-29971
An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena ODBC Driver 1.1.1 through 1.1.x before 1.1.17 may allow a local user to execute arbitrary code...
CVE-2019-15809
Smart cards from the Athena SCS manufacturer, based on the Atmel Toolbox 00.03.11.05 and the AT90SC chip, contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private...
athena.liaison.com Cross Site Scripting vulnerability OBB-4038197
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
athena-formation.com Cross Site Scripting vulnerability OBB-3916164
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
athena-art.com Cross Site Scripting vulnerability OBB-3897897
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
APT28 Hacker Group Targeting Europe, Americas, Asia in Widespread Phishing Scheme
The Russia-linked threat actor known as APT28 has been linked to multiple ongoing phishing campaigns that employ lure documents imitating government and non-governmental organizations NGOs in Europe, the South Caucasus, Central Asia, and North and South America. "The uncovered lures include a...
athena-vostok.com Cross Site Scripting vulnerability OBB-3869445
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
bip.covid19.athenarc.gr Cross Site Scripting vulnerability OBB-3858373
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
dagster-dbt (>=0.20.5 <=0.23.6), dbt-af (>=0.4.1 <=0.4.2) +52 more potentially affected by unknown CVE via dbt-core (>=1.7.0 <=1.7.2)
dbt-core PYPI version =1.7.0, =0.20.5, =0.4.1, =1.7.0, =1.7.0, =1.7.1, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.0.0, =1.7.0, =1.7.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-J4G3-3Q8X-JXQP...
athena-cbh.com Cross Site Scripting vulnerability OBB-3752861
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
How to Protect Against Data Lake Hacking
Data lakes, or centralized repositories for large-scale data, are a popular solution for data storage, and there are good reasons for that. Data lakes are flexible and cost-effective, as they allow many object formats and multiple query engines, and there is no need to manage or pay for resources...
athena-cbh.com Cross Site Scripting vulnerability OBB-3575044
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
athena-grill.de Cross Site Scripting vulnerability OBB-3404089
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Nuclearpond - A Utility Leveraging Nuclei To Perform Internet Wide Scans For The Cost Of A Cup Of Coffee
Nuclear Pond is used to leverage Nuclei in the cloud with unremarkable speed, flexibility, and perform internet wide scans for far less than a cup of coffee. It leverages AWS Lambda as a backend to invoke Nuclei scans in parallel, choice of storing json findings in s3 to query with AWS Athena, an...
Fedora: Security Advisory for golang-github-uber-athenadriver (FEDORA-2022-37aef44d1e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
