talentgum.com Improper Access Control vulnerability OBB-2146755

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

bizquartz.com Improper Access Control vulnerability OBB-2146753

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

alephzero.org Improper Access Control vulnerability OBB-2146745

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

bubok.com Cross Site Scripting vulnerability OBB-2146721

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

banraicity.go.th Cross Site Scripting vulnerability OBB-2146720

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

travelostic.com Cross Site Scripting vulnerability OBB-2146699

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

seaturtle.org Cross Site Scripting vulnerability OBB-2119042

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

The vulnerability of the Fly-wm window manager, related to the disclosure of information, allows attackers to gain access to confidential data.

The vulnerability of the Fly-wm window manager is related to the disclosure of information during password input from a locked session. Exploiting this vulnerability allows an attacker to gain access to confidential data...

The vulnerability of the fly-fm file manager, related to insufficient data processing within the security mechanisms, allows a perpetrator to trigger a service failure.

The vulnerability of the fly-fm file manager is related to the first connection of a network location via sftp. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data due to a denial-of-service attack...

The vulnerability of the X-server startup system service fly-dm, related to access control deficiencies, allows a perpetrator to gain access to confidential data.

The vulnerability of the X-server startup system service fly-dm is related to access control deficiencies. Exploiting this vulnerability allows an attacker to gain access to confidential data...

The vulnerability of the Fly-wm window manager, related to the disclosure of information, allows attackers to gain access to confidential data.

The vulnerability of the Fly-wm window manager is related to the absence of a prohibition against connecting programs from the network during session blocking. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

The vulnerability of the fly-qdm GUI input software, related to a code error, allows a intruder to access confidential data.

The vulnerability of the fly-qdm GUI login software lies in the absence of a warning when an outdated password is used during password changes. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

The vulnerability of the fly-qdm GUI input software, related to the disclosure of information, allows a perpetrator to gain access to confidential data.

The vulnerability of the fly-qdm GUI login software is related to the automatic display of the user’s name. Exploiting this vulnerability allows an intruder to access confidential data...

The vulnerability of the fly-fm file manager, related to errors in its code, allows a perpetrator to gain access to confidential data.

The vulnerability of the fly-fm file manager is related to an incorrect password request from the user for accessing the password storage. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

The vulnerability of the software for setting the time in the fly-admin-date operating system, related to lack of access control, allows a intruder to cause a service failure.

The vulnerability of the software for setting the time in the fly-admin-date operating system is related to lack of access control. Exploiting this vulnerability allows a perpetrator to cause service failures...

The vulnerability of the fly-admin-gmc graphical control console lies in the insufficient processing of data within the security mechanisms, allowing an intruder to access confidential data.

The vulnerability of the fly-admin-gmc graphical control console is related to the incorrect display of settings for non-privileged users. Exploiting this vulnerability allows a hacker to gain access to confidential data...

The vulnerability of the graphical input settings in the fly-admin-dm system, due to lack of access control mechanisms, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the graphical input settings in the fly-admin-dm system is related to deficiencies in access control when changing the theme to “Fly Modern”. Exploiting this vulnerability allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service...

PT-2021-30924

Уязвимость файлового менеджера fly-fm связана с некорректным вычислением MD5 в окне программы. Эксплуатация уязвимости позволяет нарушителю, действующему удаленно, вызвать отказ в обслуживании...

SQL Injection Vulnerability in Office Fly of Zhejiang Eagle Software Co.

Ltd. ZheJiang Eagle Soft Co., LTD was established in November 2004, the company adhere to the "focus, professional" business philosophy for enterprises, administrative institutions to provide information technology solutions and software services. The company adheres to the business philosophy of...

SQL Injection Vulnerability in Office Fly of Zhejiang Eagle Software Co. Ltd (CNVD-2021-10552)

Ltd. ZheJiang Eagle Soft Co., LTD was established in November 2004, the company adhere to the "focus, professional" business philosophy for enterprises, administrative institutions to provide information technology solutions and software services. The company adheres to the business philosophy of...