1062 matches found
dr-middeldorf.de Cross Site Scripting vulnerability OBB-1229581
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Zoho ManageEngine DataSecurity Plus Directory Traversal (CVE-2020-11531)
A directory traversal vulnerability exists in Zoho ManageEngine DataSecurity Plus. The vulnerability is due to lack of validation of the database schema name when handling a DR-SCHEMA-SYNC request in DataEngine Xnode Server application...
drchernoff.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1182381 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
dr-holiday.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1167142 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Directory traversal
The DataEngine Xnode Server application in Zoho ManageEngine DataSecurity Plus prior to 6.0.1 does not validate the database schema name when handling a DR-SCHEMA-SYNC request. This allows an authenticated attacker to execute code in the context of the product by writing a JSP file to the webroot...
dr-salama-jean-pierre.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1148299 Security Researcher cvesh Helped patch 9 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting dr-salama-jean-pierre.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines o...
dr-rotov.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1144644 Security Researcher kun-fly Helped patch 802 vulnerabilities Received 7 Coordinated Disclosure badges Received 44 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting dr-rotov.ru website and its...
SQL injection vulnerability in ne***.asp page di*** parameter and pr***.php page di*** parameter of website building system of Shenzhen Dr. Tong Technology Co.
Ltd. is an Internet infrastructure operator engaged in website construction, website optimization and Internet marketing. There is a SQL injection vulnerability in the ne.asp page di parameter and pr.php page di parameter of the website building system of Shenzhen Dr. Tong Technology Co. Ltd. whi...
Fake Coronavirus ‘Vaccine’ Website Busted in DoJ Takedown
The Department of Justice has raised its first federal court action against online fraud relating to the coronavirus pandemic, on Sunday taking steps to shutter a fraudulent website that claimed to give away free coronavirus vaccines. The website, “coronavirusmedicalkit.com,” was purporting to gi...
SQL Injection Vulnerability in Website Building System of Shenzhen Dr. Tong Technology Co.
Ltd. business covers domain name registration, space purchase, enterprise website construction, Shenzhen website construction, marketing website construction, platform website customization, mobile website construction, enterprise mailbox application, WeChat public number operation, Baidu bidding...
CVE-2019-3747
Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a stored cross-site scripting vulnerability. A remote malicious ACM admin user may potentially exploit this vulnerability to store malicious HTML or JavaScript code in Cloud DR add-on specific field. When victim users...
Cross site scripting
Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a stored cross-site scripting vulnerability. A remote malicious ACM admin user may potentially exploit this vulnerability to store malicious HTML or JavaScript code in Cloud DR add-on specific field. When victim users...
Hackers cloned NordVPN website to drop banking trojan
By Sudais The malware campaign was discovered by Dr. Web detailing how hackers have been using Bolik banking trojan against unsuspected users. This is a post from HackRead.com Read the original post: Hackers cloned NordVPN website to drop banking trojan...
Backdoor Built into Android Firmware
In 2017, some Android phones came with a backdoor pre-installed: Criminals in 2017 managed to get an advanced backdoor preinstalled on Android devices before they left the factories of manufacturers, Google researchers confirmed on Thursday. Triada first came to light in 2016 in articles publishe...
CVE-2018-19612
The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types and execute ASP code...
Code injection
The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types and execute ASP code...
CVE-2018-19612
The CVE-2018-19612 issue affects Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers, where the /uploadfile? feature allows remote attackers to upload malicious file types and execute ASP code. The vulnerability originates from the upload functionality, enabling unauthenticated or unauthenticate...
CVE-2018-19613
The CVE-2018-19613 entry covers CSRF in Westermo DR-250 Pre-5162, DR-260 Pre-5162, and MR-260 devices. Public sources in the connected documents confirm the vulnerability exists in these routers; no root-cause or patch details are provided in the supplied materials. The records indicate cross-sit...
Westermo DR-260, DR-250 and MR-260 Cross-Site Request Forgery Vulnerabilities
Westermo DR-260 and others are products of the Swedish company Westermo.Westermo DR-260 is a DSL router.Westermo DR-250 is a DSL router.Westermo MR-260 is a 3G multimedia router.Westermo MR-260 is a 3G multimedia router.Westermo MR-260 is a 3G multimedia router.Westermo MR-260 is a 3G multimedia...