maxonestates.com Cross Site Scripting vulnerability OBB-3638204

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-40898

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter timeZone at /goform/SetSysTimeCfg...

CVE-2023-34566

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter time at /goform/saveParentControlInfo...

Rockwell Automation ArmorStart ST 跨站脚本漏洞

Rockwell Automation ArmorStart ST is a simple and cost-effective solution for machine-side control architectures from Rockwell Automation. A cross-site scripting vulnerability exists in Rockwell Automation ArmorStart ST, which can be exploited by an attacker to view and modify sensitive data or...

CVE-2023-1212 Cross-site Scripting (XSS) - Stored in phpipam/phpipam

Cross-site Scripting XSS - Stored in GitHub repository phpipam/phpipam prior to v1.5.2...

CVE-2020-18331

Directory traversal vulnerability in ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the firmware version W2000EN-01hardware platform Gpn2.4P21-CWIFI-V0.05, via the getpage parameter to /cgi-bin/webproc...

Multiple schools hit by Vice Society ransomware attack

The real world impact of cybercrime rears its head once more, with word that 14 schools in the UK have been caught out by ransomware. The schools, attacked by the group known as Vice Society, have had multiple documents leaked online in the wake of the attack. One of the primary schools...

HP Print Products 缓冲区错误漏洞

HP Print Products is a line of printers from Hewlett-Packard HP in the United States. A buffer error vulnerability exists in HP Print Products. An attacker could exploit this vulnerability to remotely execute code...

PT-2022-21878 · Fortinet · Fortiadc

Name of the Vulnerable Software and Affected Versions: Fortinet FortiADC versions 6.2.4 and below Fortinet FortiADC versions 7.0.0 through 7.0.2 Fortinet FortiADC version 7.1.0 Description: An improper neutralization of special elements used in an SQL Command 'SQL Injection' vulnerability allows ...

CVE-2022-45650

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the firewallEn parameter in the formSetFirewallCfg function...

CVE-2022-36077 Electron subject to Exfiltration of hashed SMB credentials on Windows via file:// redirect

The Electron framework enables writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions prior to 21.0.0-beta.1, 20.0.1, 19.0.11, and 18.3.7, Electron is vulnerable to Exposure of Sensitive Information. When following a redirect, Electron delays a check for redirecti...

The vulnerability of the Velociraptor incident analysis software allows a hacker to re-write any file they desire.

The vulnerability of the Velociraptor incident analysis software relates to an improper definition of the link before accessing a file. Exploiting this vulnerability could allow an attacker to re-record any file...

ibuilder4.it Cross Site Scripting vulnerability OBB-2809634

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-31513

The BolunHan/Krypton repository through 2021-06-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-30308

creationtimestamp| type| source ---|---|--- 2022-06-13 18:18:06+00:00| seen| https://t.me/cibsecurity/44301 2022-07-11 12:37:51+00:00| seen| https://t.me/CyberSecurityTechnologies/6376 2022-07-11 22:17:54+00:00| published-proof-of-concept| https://t.me/MrVGunz/325 2025-07-01 10:00:00+00:00| seen|...

zengroup.co.th Improper Access Control vulnerability OBB-2465194

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-26200

...

elenplast.com Cross Site Scripting vulnerability OBB-2377280

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

financieel-management.nl Cross Site Scripting vulnerability OBB-2367605

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Oracle MySQL 输入验证错误漏洞

Oracle MySQL Cluster is a write-scalable, real-time, ACID-compatible transactional database developed by Oracle Corporation USA. Oracle MySQL Cluster is vulnerable to an input validation error, which can be exploited by attackers to corrupt or delete data...