CVE-2018-14936: Improper Neutralization of Input During Web Page Generation

The Add page option in my little forum 2.4.12 allows XSS via the Title field...

CVE-2018-14937: Improper Neutralization of Input During Web Page Generation

The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field...

The vulnerability of the `lim_send_sme_probe_req_ind` function in the Qualcomm WLAN operating system’s Android component from the CAF repository allows a hacker to escalate their privileges.

The vulnerability of the limsendsmeprobereqind function in the Qualcomm WLAN operating system’s Android component, as found in the CAF repository, is due to a buffer overflow. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

farmworks.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-654935 Description| Value ---|--- Affected Website:| farmworks.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The vulnerability of the IPA driver of the Qualcomm Data Network Stack & Connectivity operating system for Android from the CAF repository allows a hacker to increase their privileges.

The vulnerability of the IPA driver of the Qualcomm Data Network Stack & Connectivity operating system for Android, found in the CAF repository, relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

The vulnerability of the Qualcomm WLAN operating system driver for Android from the CAF repository allows a hacker to execute arbitrary code.

The vulnerability of the Qualcomm WLAN operating system driver for Android, found in the CAF repository, is caused by buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

prise2tete.fr XSS vulnerability

Open Bug Bounty ID: OBB-651833 Description| Value ---|--- Affected Website:| prise2tete.fr Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sufdonline.ru XSS vulnerability

Open Bug Bounty ID: OBB-651780 Description| Value ---|--- Affected Website:| sufdonline.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bluehog.sonicworld.net XSS vulnerability

Open Bug Bounty ID: OBB-651559 Description| Value ---|--- Affected Website:| bluehog.sonicworld.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-14474

views/auth.go in Orange Forum 1.4.0 allows Open Redirection via the next parameter to /login or /signup...

Open redirect

views/auth.go in Orange Forum 1.4.0 allows Open Redirection via the next parameter to /login or /signup...

CVE-2018-14474

views/auth.go in Orange Forum 1.4.0 allows Open Redirection via the next parameter to /login or /signup...

CVE-2018-14474

CVE-2018-14474 affects Orange Forum 1.4.0, with an open redirect in views/auth.go triggered by the next parameter to /login or /signup. The vulnerability allows an attacker to redirect users to a malicious site, potentially enabling phishing or credential theft. Several connected sources (e.g., N...

CVE-2018-14474

views/auth.go in Orange Forum 1.4.0 allows Open Redirection via the next parameter to /login or /signup...

CVE-2018-14474

views/auth.go in Orange Forum 1.4.0 allows Open Redirection via the next parameter to /login or /signup...

game-ded.com XSS vulnerability

Open Bug Bounty ID: OBB-650862 Description| Value ---|--- Affected Website:| game-ded.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-14474: URL Redirection to Untrusted Site

views/auth.go in Orange Forum 1.4.0 allows Open Redirection via the next parameter to /login or /signup...

PT-2018-12543

Name of the Vulnerable Software and Affected Versions Orange Forum version 1.4.0 Description The issue in Orange Forum allows Open Redirection via the next parameter to "/login" or "/signup" API endpoints. This can be exploited by manipulating the next parameter. Recommendations For Orange Forum...

Microsoft Says Russia Tried to Hack Three 2018 Midterm Election Candidates

Microsoft said it detected and helped the US government to block Russian hacking attempts against at least three congressional candidates this year, a Microsoft executive revealed speaking at the Aspen Security Forum today. Although the company refused to name the targets but said, the three...

Hacker Compromises Air Force Captain to Steal Sensitive Drone Info

A hacker has penetrated an Air Force captain’s computer to steal sensitive information about U.S. military drones and other state secrets, according to a cybersecurity firm’s investigation of dark web activities. On June 1, Recorded Future’s Insikt Group was monitoring underground criminal activi...