ferien-im-finistere.de Cross Site Scripting vulnerability OBB-2720499

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

senioren-wohnen-im-birkenhof.de Cross Site Scripting vulnerability OBB-2708298

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

im-machinery.de Cross Site Scripting vulnerability OBB-2678778

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-21106

Name of the Vulnerable Software and Affected Versions 74cmsSE version 3.5.1 Description A reflective cross-site scripting XSS issue was found in 74cmsSE. The issue is related to the /company/service/increment/add/im API endpoint. This allows for potential XSS attacks. Recommendations For 74cmsSE...

Malicious code in auction2-im (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab96f186f17e4deb915d4bda7bc4cc0dfa12f2e648fa95f854b153e5edd03d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1168 Malicious code in auction2-im (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab96f186f17e4deb915d4bda7bc4cc0dfa12f2e648fa95f854b153e5edd03d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kim-im (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ae62682ee14d5986073ee30a942513c3872303fd4654cfb3806a21c155e0bc0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4166 Malicious code in kim-im (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ae62682ee14d5986073ee30a942513c3872303fd4654cfb3806a21c155e0bc0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

freiburg-im-netz.de Cross Site Scripting vulnerability OBB-2654948

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability in the web interface of the Cisco Unified Communications Manager IM & Presence Service allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of the Web interface for managing the Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

CVE-2022-20786

CVE-2022-20786 affects Cisco Unified Communications Manager IM & Presence Service. The vulnerability is an SQL injection in the web-based management interface caused by improper validation of user-submitted parameters. An authenticated, remote attacker can send malicious requests to the applicati...

CVE-2022-20786: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to improper validation of...

CVE-2022-20786

A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to improper validation of...

CVE-2021-43430

An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via imwebserver, which could let a malicious user upload PHP Trojan files...

CVE-2021-43430

An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via imwebserver, which could let a malicious user upload PHP Trojan files...

PT-2022-11835

Name of the Vulnerable Software and Affected Versions BigAntSoft BigAnt office messenger version 5.6 Description An Access Control issue exists via im webserver, which could let a malicious user upload PHP Trojan files. Recommendations For BigAntSoft BigAnt office messenger version 5.6, consider...

CVE-2021-30328

Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

Input validation

Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30328: Reachable Assertion

Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

kirche-im-dorf.de Improper Access Control vulnerability OBB-2406994

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...