CVE-2018-6506

Cross-Site Scripting XSS exists in the Add Forum feature in the Administrative Panel in miniBB 3.2.2 via crafted use of an onload attribute of an SVG element in the supertitle field...

CVE-2018-6506

Cross-Site Scripting XSS exists in the Add Forum feature in the Administrative Panel in miniBB 3.2.2 via crafted use of an onload attribute of an SVG element in the supertitle field...

CVE-2018-6506

Cross-Site Scripting XSS exists in the Add Forum feature in the Administrative Panel in miniBB 3.2.2 via crafted use of an onload attribute of an SVG element in the supertitle field...

miniBB Cross-Site Scripting Vulnerability

miniBB full name Minimalistic Bulletin Board is a free, open source Internet forum software. The software supports a variety of forum styles , multiple interface languages , multiple time zones , plug-ins and extensions , etc. Administrative Panel is one of the administrative panel . A cross-site...

New Deepfakes forum goes mining with Coinhive

You may or may be familiar with the furore over Deepfakes, a relatively new development in pornography involving a tool called FacesApp, which is capable of producing a real porn clip that replaces the original actors' heads with those of celebrities—or indeed, anyone at all. Online fakes have be...

CVE-2018-6844

MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen...

Design/Logic Flaw

MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen...

CVE-2018-6844

CVE-2018-6844 affects MyBB 1.8.14 and represents a cross-site scripting (XSS) vulnerability exposed via the Title or Description field on the Edit Forum screen. The connected documents consistently describe this XSS in MyBB 1.8.14, but they do not provide concrete details on the underlying code p...

CVE-2018-6844

MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen...

forum-bateau.com XSS vulnerability

Open Bug Bounty ID: OBB-551096 Description| Value ---|--- Affected Website:| forum-bateau.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

uer.ca XSS vulnerability

Open Bug Bounty ID: OBB-550141 Description| Value ---|--- Affected Website:| uer.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wunderkessel.de XSS vulnerability

Open Bug Bounty ID: OBB-549813 Description| Value ---|--- Affected Website:| wunderkessel.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Forum software by XenForo Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

IGF proves the value of bottom-up, multi-stakeholder model in cyberspace policy-making

In December, the Internet Governance Forum IGF brought the world together to talk about the internet. I tend to take a definite interest in cybersecurity, but there were many more important topics discussed. They ranged from diversity in the technology sector through to philosophy in the digital...

IGF proves the value of bottom-up, multi-stakeholder model in cyberspace policy-making

In December, the Internet Governance Forum IGF brought the world together to talk about the internet. I tend to take a definite interest in cybersecurity, but there were many more important topics discussed. They ranged from diversity in the technology sector through to philosophy in the digital...

ehealth-forum2011.mobigator.com XSS vulnerability

Open Bug Bounty ID: OBB-548017 Description| Value ---|--- Affected Website:| ehealth-forum2011.mobigator.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Valve: Read Access to all comments on unauthorized forums' discussions! IDOR!

hi, For a forum's discussion, only moderator+ ranks are allowed to view comments which have been deleted by a officer/moderator . I have found an issue where a member who is not allowed to view deleted comments can get read access to the deleted comments on a forum's discussion. Also, a non-membe...

FreeBSD : phpbb3 -- multiple issues (8e89a89a-fd15-11e7-bdf6-00e04c1ea73d)

phpbb developers reports : Password updater working with PostgreSQL - The cron for updating legacy password hashes was running invalid queries on PostgreSQL. Deleting orphaned attachments w/ large number of orphaned attachments - Orphaned attachment deletion was improved to be able to delete them...

kultur-forum-amthof.at XSS vulnerability

Open Bug Bounty ID: OBB-511924 Description| Value ---|--- Affected Website:| kultur-forum-amthof.at Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

forum-sc.msi.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-507027 Description| Value ---|--- Affected Website:| forum-sc.msi.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure...

phpbb3 -- multiple issues

phpbb developers reports: Password updater working with PostgreSQL - The cron for updating legacy password hashes was running invalid queries on PostgreSQL. Deleting orphaned attachments w/ large number of orphaned attachments - Orphaned attachment deletion was improved to be able to delete them...