Rapid7 Recognized by Newsweek as one of ‘America’s Greatest Workplaces for Diversity for 2024’.

On December 13th, Newsweek Magazine published their list of ‘America’s Greatest Workplaces for Diversity for 2024’. Like many companies today, Rapid7 recognizes the positive impact diversity plays in driving organizational success, attracting and retaining exceptional talent, and creating positiv...

Mozilla Firefox Warning Missing Data Compromise

The vulnerability of Mozilla Firefox and Firefox Focus is related to the lack of a warning when switching to a new protocol handler. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

SUSE CVE-2023-6870

Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displayed by Firefox. This issue only affects Android versions of Firefox and Firefox Focus. This vulnerability affects Firefox 121...

CVE-2023-6870

Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displayed by Firefox. This issue only affects Android versions of Firefox and Firefox Focus. This vulnerability affects Firefox 121...

UBUNTU-CVE-2023-6870

Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displayed by Firefox. This issue only affects Android versions of Firefox and Firefox Focus. This vulnerability affects Firefox 121...

PT-2023-8011

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 121 Firefox Focus versions prior to 121 Description The issue is related to errors in handling fullscreen notifications in Mozilla Firefox and Firefox Focus for Android. It may allow a remote attacker to impact data...

CVE-2023-6870: Undefined Security Weakness

Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displayed by Firefox. This issue only affects Android versions of Firefox and Firefox Focus. This vulnerability affects Firefox 121...

focus-sport.net Cross Site Scripting vulnerability OBB-3817188

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2020-25835

A potential vulnerability has been identified in Micro Focus ArcSight Management Center. The vulnerability could be remotely exploited resulting in stored Cross-Site Scripting XSS...

Cross site scripting

A potential vulnerability has been identified in Micro Focus ArcSight Management Center. The vulnerability could be remotely exploited resulting in stored Cross-Site Scripting XSS...

CVE-2020-25835

Technical details about CVE-2020-25835 (affected versions, root cause, and fix) are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2020-25835 Micro Focus ArcSight Management Center Remote Vulnerability

A potential vulnerability has been identified in Micro Focus ArcSight Management Center. The vulnerability could be remotely exploited resulting in stored Cross-Site Scripting XSS...

CVE-2020-25835: Improper Neutralization of Input During Web Page Generation

A potential vulnerability has been identified in Micro Focus ArcSight Management Center. The vulnerability could be remotely exploited resulting in stored Cross-Site Scripting XSS...

PT-2023-11740 · Micro Focus · Micro Focus Arcsight Management Center

Name of the Vulnerable Software and Affected Versions: Micro Focus ArcSight Management Center affected versions not specified Description: A potential issue has been identified in Micro Focus ArcSight Management Center, which could be remotely exploited, resulting in stored Cross-Site Scripting...

Micro Focus Filr Security Breach

Micro Focus Filr is a suite of enterprise-grade file access and sharing solutions from Micro Focus, a U.K.-based company. A security vulnerability exists in Micro Focus Filr that stems from a credential disclosure vulnerability that allows an administrator-equivalent user to view sensitive...

focus-energie.de Improper Access Control vulnerability OBB-3766975

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-4501

User authentication with username and password credentials is ineffective in OpenText Micro Focus Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server including product variants such as Enterprise Test Server, versions 7.0 patch updates 19 and 20, 8.0 patch updates 8 and 9, and...

Default credentials

User authentication with username and password credentials is ineffective in OpenText Micro Focus Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server including product variants such as Enterprise Test Server, versions 7.0 patch updates 19 and 20, 8.0 patch updates 8 and 9, and...

CVE-2023-4501 Authentication bypass in OpenText (Micro Focus) Enterprise Server

User authentication with username and password credentials is ineffective in OpenText Micro Focus Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server including product variants such as Enterprise Test Server, versions 7.0 patch updates 19 and 20, 8.0 patch updates 8 and 9, and...

CVE-2023-4501

OpenText (Micro Focus) Visual COBOL, COBOL Server, and Enterprise products (including Enterprise Developer/Enterprise Server) are affected. The issue: LDAP-based authentication can bypass and allow login with any valid username (and any password) or even an invalid username with any password for ...