306 matches found
CVE-2023-24499
CVE-2023-24499 concerns the Butterfly Button plugin, which may leave traces of its use on a user’s device. Public data reports an impact to confidentiality (traceability of usage) with a CVSSv3.1 base score around 4.3–4.6 (medium). The vulnerability is described in terms of residual traces rather...
CVE-2023-24499: Undefined Security Weakness
Butterfly Button plugin may leave traces of its use on user's device. Since it is used for reporting domestic problems, this may lead to spouse knowing about its use...
butterfly-counselling.co.uk Cross Site Scripting vulnerability OBB-3003663
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
butterfly.org.au Cross Site Scripting vulnerability OBB-2888684
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
butterflysnacks.com Cross Site Scripting vulnerability OBB-2305131
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Could Apple’s new MacBooks signal a change in direction on security?
Apple recently announced a new line of completely overhauled MacBook Pros. Much has been written about their new design, new chips, new displays, new keyboards etc, but I thought I detected something else that might be new about these MacBooks too: A new approach. The updated laptops may be the...
butterfly-dodatkislubne.pl Cross Site Scripting vulnerability OBB-1199488
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
butterflywebradio.gr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1162713 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
WebKit JSC - AbstractValue::set Use-After-Free
WebKit JSC - AbstractValue::set Use-After-Free indexingType; mtype = speculationFromStructurestructure.get; mvalue = JSValue; checkConsistency; assertIsRegisteredgraph; It works out marrayModes using structure-indexingType instead of structure-indexingMode. As structure-indexingType masks out the...
WebKit JSC - 'AbstractValue::set' Use-After-Free
indexingType; mtype = speculationFromStructurestructure.get; mvalue = JSValue; checkConsistency; assertIsRegisteredgraph; It works out marrayModes using structure-indexingType instead of structure-indexingMode. As structure-indexingType masks out the CopyOnWrite flag, which indicates that the...
jsc: Heap-buffer-overflow in JSC::IndexingHeader::vectorLength
Detailed report: https://oss-fuzz.com/testcase?key=5694527739265024 Project: jsc Fuzzer: jsfuzzer Job Type: asanjsc Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x62d000060004 Crash State: JSC::IndexingHeader::vectorLength JSC::Butterfly::computeIndexingMask...
Fedora 25 : libmtp (2017-4c57da6642)
libmtp 1.1.13 ============= Christophe Vu-Brugier 1 : - added GoPro HERO5 Black Emeric Grange 2 : - added GoPro HERO5 Session - rename F5321 into XPeria X Compact Gaute Hope 2 : - add GoPro Hero+ - add mtp-detect for GoPro Hero+ Jerry Zhang 1 : - Update Google device strings, add PTP+ADB id Marcu...
butterflybingo.com XSS vulnerability
Vulnerable URL: https://www.butterflybingo.com/%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6335720 VIP website status:| No Che...
Coloring Book: Butterfly! FREE - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Coloring Book: Butterfly! FREE published at the 'play' market has multiple vulnerabilities...
Flutter: Butterfly Sanctuary - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Flutter: Butterfly Sanctuary published at the 'play' market has multiple vulnerabilities...
Butterfly Live Wallpaper - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Butterfly Live Wallpaper published at the 'play' market has multiple vulnerabilities...
Butterfly Live Wallpaper - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Butterfly Live Wallpaper published at the 'play' market has multiple vulnerabilities...
Shiny Butterfly Live Wallpaper - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Shiny Butterfly Live Wallpaper published at the 'play' market has multiple vulnerabilities...
Butterfly locksreen - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Butterfly locksreen published at the 'play' market has multiple vulnerabilities...
How to Draw Butterfly Animal - Base64 encoded String, Exported ContentProvider, Hardcoded secrets vulnerabilities
HackApp vulnerability scanner discovered that application How to Draw Butterfly Animal published at the 'play' market has multiple vulnerabilities...