inquilab.com Cross Site Scripting vulnerability OBB-3955202

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

airtechnology.com Cross Site Scripting vulnerability OBB-3953569

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kalgoorlieps.wa.edu.au Cross Site Scripting vulnerability OBB-3953474

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-37135

DM5500 5.16.0.0, contains an information disclosure vulnerability. A local attacker with high privileges could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable applicatio...

CVE-2024-38103

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVE-2024-38103) is documented in the CVE entry with a MEDIUM base score (CVSS 3.1) and edge network-based exposure. Connected documents corroborate that this CVE is part of a family of Edge vulnerabilities reported in 2024 (e.g...

JetBrains TeamCity Information Disclosure Vulnerability

JetBrains TeamCity is a Continuous Integration CI/CD tool that is primarily used to automate the software build, test, and deployment process. An information disclosure vulnerability exists in JetBrains TeamCity, which stems from a "password"-type parameter that can be disclosed to build logs und...

Security Bulletin: IBM InfoSphere Information Server is affected by an information disclosure vulnerability (CVE-2024-37533)

Summary An information disclosure vulnerability in InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2024-37533 DESCRIPTION: IBM InfoSphere Information Server could disclose sensitive user information to another user with physical access to the machine. CVSS Base score:...

rondini.fr Cross Site Scripting vulnerability OBB-3947848

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

LG Simple Editor Information Disclosure Vulnerability

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

IBM Sterling Partner Engagement Manager Information Disclosure Vulnerability (CNVD-2024-35115)

IBM Sterling Partner Engagement Manager is an automated management tool from International Business Machines IBM. An information disclosure vulnerability exists in IBM Sterling Partner Engagement Manager version 6.2.2, which can be exploited by a local attacker to gain access to sensitive...

IBM Datacap Navigator Information Disclosure Vulnerability (CNVD-2024-33370)

IBM Datacap Navigator is a Web client for Datacap from International Business Machines IBM. An information disclosure vulnerability exists in IBM Datacap Navigator that stems from not setting a security attribute on an authorization token or session cookie, which can be exploited by an attacker t...

CVE-2024-6574

CVE-2024-6574 affects the Laposta plugin for WordPress, with Full Path Disclosure in all versions up to and including 1.12 due to direct access to test files. Unauthenticated attackers could retrieve the web app’s full path, aiding other attacks. The plugin is no longer maintained and has been cl...

Microsoft Dynamics 365 (on-premises) information disclosure vulnerability (CNVD-2024-34112)

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. An information disclosure vulnerability exists in Microsoft Dynamics 365...

Pepperl+Fuchs Multiple Products Information Disclosure Vulnerability

Pepperl+Fuchs OIT Series is a series of high-temperature identification systems from Pepperl+Fuchs, Germany. An information disclosure vulnerability exists in various Pepperl+Fuchs products, which originates from an unauthenticated, remote attacker being able to read sensitive device information...

WordPress plugin FileBird Document Library Information Disclosure Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

CVE-2024-30071

Windows Remote Access Connection Manager Information Disclosure Vulnerability...

estatesilver.com Cross Site Scripting vulnerability OBB-3942479

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Siemens RUGGEDCOM 信息泄露漏洞

Siemens RuggedCom ROS is an operating system from Siemens, Germany, used in the RuggedCom series of switches. An information disclosure vulnerability exists in Siemens RUGGEDCOM ROS, which can be exploited by an attacker to retrieve a MACSEC key and access decrypt Ethernet frames sent by an...

Siemens SIMATIC WinCC和Siemens SIMATIC PCS 安全漏洞

Siemens SIMATIC PCS 7 is a process control system from Siemens, Germany.SIMATIC WinCC is an automated data acquisition and monitoring SCADA system.SIMATIC WinCC Runtime Professional is a runtime platform for operator visualization, machine and device control and monitoring. equipment control and...

Microsoft SharePoint 安全漏洞

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An information...