CVE-2019-9227

An issue was discovered in baigo CMS 2.1.1. There is a vulnerability that allows remote attackers to execute arbitrary code. A BGSITENAME parameter with malicious code can be written into the optbase.inc.php file...

U.S. Dept Of Defense: [https://███] Local File Inclusion via graph.php

Summary: There exists a Local File Inclusion vulnerability on https://████ due to a known vulnerability in the ZendTo library. This was fixed in Version 5.16-6 Beta, although ██████ is still running ZendTo 5.11. Impact This allows path traversal in a file name that is then returned to the user...

MGASA-2019-0043 Updated libssh packages fix security vulnerability

libssh versions 0.6 and above have an authentication bypass vulnerability in the server code. By presenting the server an SSH2MSGUSERAUTHSUCCESS message in place of the SSH2MSGUSERAUTHREQUEST message which the server would expect to initiate authentication, the attacker could successfully...

WordPress Plugin Audio Record 1.0 - Arbitrary File Upload

WordPress Plugin Audio Record 1.0 - Arbitrary File Upload Exploit Title: WordPress Plugin Audio Record 1.0 - Arbitrary File Upload Date: 2018-12-24 Software Link: https://wordpress.org/plugins/audio-record/ Exploit Author: Kaimi Website: https://kaimi.io Version: 1.0 Category: webapps Unrestricte...

valentino.com XSS vulnerability

Open Bug Bounty ID: OBB-705930 Description| Value ---|--- Affected Website:| valentino.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-5877

CVE-2018-5877 describes a vulnerability in the device programmer target-side code for firehose used on Qualcomm Snapdragon platforms. The issue arises because a string may not be properly NULL terminated, potentially leading to an incorrect buffer size in Snapdragon Automotive, Mobile, and Wear d...

info.stanjohnsonco.com XSS vulnerability

Open Bug Bounty ID: OBB-695761 Description| Value ---|--- Affected Website:| info.stanjohnsonco.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-16840

A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy handle. When closing and cleaning up an 'easy' handle in the Curlclose function, the library code first frees a struct without nulling the pointer and might then subsequently...

Integer Overflow or Wraparound

In the client in Bytom checkTopicRegister in p/discover/net.go does not prevent negative idx values, leading to a crash...

nhatviets.com XSS vulnerability

Open Bug Bounty ID: OBB-679687 Description| Value ---|--- Affected Website:| nhatviets.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Five Weakest Links in Cybersecurity That Target the Supply Chain

Matan Or-El, co-founder and CEO at Panorays Third-party breaches have become an epidemic as cybercriminals target the weakest link. Organizations such as BestBuy, Sears, Delta and even NYU Medical Center are just a few that have felt the impact of cyberattacks through third-party vendors. The...

wolvcoll.ac.uk Improper Access Control vulnerability

Open Bug Bounty ID: OBB-675972 Description| Value ---|--- Affected Website:| wolvcoll.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

moodle -- multiple vulnerabilities

moodle reports: Moodle XML import of ddwtos could lead to intentional remote code execution QuickForm library remote code vulnerability upstream Boost theme - blog search GET parameter insufficiently filtered...

livingbamboo.com XSS vulnerability

Open Bug Bounty ID: OBB-663069 Description| Value ---|--- Affected Website:| livingbamboo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

comuniecitta.it XSS vulnerability

Open Bug Bounty ID: OBB-660404 Description| Value ---|--- Affected Website:| comuniecitta.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lesuisseromain.hautetfort.com XSS vulnerability

Open Bug Bounty ID: OBB-660049 Description| Value ---|--- Affected Website:| lesuisseromain.hautetfort.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kirche-im-norden.de Improper Access Control vulnerability

Open Bug Bounty ID: OBB-654659 Description| Value ---|--- Affected Website:| kirche-im-norden.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

Security Update for Microsoft Word 2016 (KB4022218) 64-Bit Edition

A security vulnerability exists in Microsoft Word 2016 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

komparify.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-637348 Description| Value ---|--- Affected Website:| komparify.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

carcast.jp XSS vulnerability

Open Bug Bounty ID: OBB-631686 Description| Value ---|--- Affected Website:| carcast.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...