Phproject Code Issues Vulnerabilities

Phproject is a project management system. The system supports features such as issue management, task management and dashboards. A code issue vulnerability exists in versions prior to Phprojec 1.7.8. An attacker can exploit the vulnerability to execute arbitrary code...

bk-blackkoala.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1148698 Security Researcher kun-fly Helped patch 791 vulnerabilities Received 7 Coordinated Disclosure badges Received 43 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting bk-blackkoala.net website a...

CVE-2020-5301 Information disclosure of source code in SimpleSAMLphp

SimpleSAMLphp versions before 1.18.6 contain an information disclosure vulnerability. The module controller in SimpleSAML\Module that processes requests for pages hosted by modules, has code to identify paths ending with .php and process those as PHP code. If no other suitable way of handling the...

hth.dk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1145199 Security Researcher roker Helped patch 48 vulnerabilities Received 1 Coordinated Disclosure badges Received 4 recommendations , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting hth.dk website and its users...

Security Update for Microsoft Office 2016 (KB4484287) 32-Bit Edition

A security vulnerability exists in Microsoft Office 2016 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Schneider Electric ZigBee Installation Toolkit Code Issue Vulnerability

Schneider Electric ZigBee Installation Toolkit is an installation toolkit software for the ZigBee wireless network protocol from Schneider Electric France. A code issue vulnerability exists in versions of Schneider Electric ZigBee Installation Toolkit prior to 1.0.1. The vulnerability can be...

Fortinet FortiClient EMS Code Issue Vulnerability

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A code issue vulnerability exists in the...

Apache ShardingSphere Code Issue Vulnerability

Apache ShardingSphere is the United States Apache Apache Software Foundation of a set of open source distributed database middleware solutions. A code issue vulnerability exists in Apache ShardingSphere incubator versions 4.0.0-RC3 and 4.0.0. An attacker could exploit this vulnerability to execut...

CVE-2019-3695

A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Developmen...

Privilege escalation

A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Developmen...

flemingislandplantationowners.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1108039 Security Researcher Dipu1A Helped patch 999 vulnerabilities Received 5 Coordinated Disclosure badges Received 22 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

Open Network Operating System (ONOS) Code Unexpected Execution Vulnerability (CNVD-2020-14219)

Open Network Operating System ONOS is a carrier-grade SDN network operating system for service providers and enterprise backbones. A code unintended execution vulnerability exists in Open Network Operating System ONOS 1.14. The vulnerability stems from a host event listener in the Virtual Broadba...

OTRS Code Issue Vulnerability

Open-source Ticket Request System OTRS is an open-source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and the...

CloudBees Jenkins Robot Framework Plugin Code Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . CloudBees Jenkins Robot...

ambassadors.sunyjcc.edu Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1067984 Security Researcher devl00p Helped patch 3018 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting ambassadors.sunyjcc.edu...

Backup and Staging by WP Time Capsule < 1.21.16 - Authentication Bypass

It is possible to login as an administrator on the site due to logical mistakes in the code. PoC The issue resides in wptc-cron-functions.php line 12 where it parses the request. This parserequest function calls the function decodeserverrequestwptc which check if the raw POST payload contains a...

Easy XML Editor Code Problem Vulnerability

Easy XML Editor is an XML editor. A code issue vulnerability exists in Easy XML Editor v1.7.8 and prior versions. The vulnerability stems from an improperly designed or implemented code development process for a web-based system or product. No detailed vulnerability details are provided at this...

darexvapenhandel.n.nu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1036205 Security Researcher Hchabik Helped patch 2444 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting darexvapenhandel.n.nu websi...

Free Photo Viewer Code Issue Vulnerability

Free Photo Viewer is a lightweight photo viewer. A code issue vulnerability exists in Free Photo Viewer. The vulnerability can be exploited to execute arbitrary code via specially crafted BMP and/or TIFF files...

SITOS six Build code issue vulnerability (CNVD-2019-42386)

SITOS is a modular e-learning system. The system includes features such as audio playback, video playback, forums, blogs and social media. A code issue vulnerability exists in SITOS six Build v6.2.1. The vulnerability stems from an improperly designed or implemented code development process for a...