CVE-2018-19925

An issue was discovered in Sales & Company Management System SCMS through 2018-06-06. It has SQL injection via the member/memberorder.php type parameter, related to the Ostate parameter...

GHSA-GHPQ-VJXW-CH5W Use after free in libpulse-binding

Overview Version 1.2.1 of the libpulse-binding Rust crate, released on the 15th of June 2018, fixed a pair of use-after-free issues with the objects returned by the getformatinfo and getcontext methods of Stream objects. These objects were mistakenly being constructed without setting an important...

Tapplock Bluetooth Low Energy Subsystem Access Control Error Vulnerability

Tapplock is a smart lock.Bluetooth Low Energy BLE subsystem is one of the low power Bluetooth subsystems. An access control error vulnerability exists in the BLE subsystem in versions of Tapplock prior to 2018-06-12, which can be exploited by an attacker to perform a replay attack...

Recognizing Q4 Top 5 Bounty Hunters

We have tabulated the results from April-June 2018. The Top 5 Bounty Hunters for Q4 are now in. As with our list from Q3, we want to recognize both the leaders in payouts and in number of successful submissions. We appreciate the hard work and dedication of the following individuals and companies...

Recognizing Q4 Top 5 Bounty Hunters

We have tabulated the results from April-June 2018. The Top 5 Bounty Hunters for Q4 are now in. As with our list from Q3, we want to recognize both the leaders in payouts and in number of successful submissions. We appreciate the hard work and dedication of the following individuals and companies...

vignetteslearning.com XSS vulnerability

Open Bug Bounty ID: OBB-638551 Description| Value ---|--- Affected Website:| vignetteslearning.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

helpdesk.agel.cz XSS vulnerability

Open Bug Bounty ID: OBB-638415 Description| Value ---|--- Affected Website:| helpdesk.agel.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

award.nl XSS vulnerability

Open Bug Bounty ID: OBB-637692 Description| Value ---|--- Affected Website:| award.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

miramedia.nl XSS vulnerability

Open Bug Bounty ID: OBB-637164 Description| Value ---|--- Affected Website:| miramedia.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Compatibility update for upgrading to Windows 10 Version 1803: June 26, 2018

Compatibility update for upgrading to Windows 10 Version 1803: June 26, 2018 Summary This update makes improvements to ease the upgrade experience to Windows 10 Version 1803. How to get this update This update is available through Windows Update. It will be downloaded and installed automatically...

studiojk.com XSS vulnerability

Open Bug Bounty ID: OBB-636256 Description| Value ---|--- Affected Website:| studiojk.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

rentingauthority.com XSS vulnerability

Open Bug Bounty ID: OBB-636222 Description| Value ---|--- Affected Website:| rentingauthority.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cp.qc.coccoc.com XSS vulnerability

Open Bug Bounty ID: OBB-635355 Description| Value ---|--- Affected Website:| cp.qc.coccoc.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

test.de XSS vulnerability

Open Bug Bounty ID: OBB-634972 Description| Value ---|--- Affected Website:| test.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cisco NX-OS Software NX-API Arbitrary Code Execution Vulnerability

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft a packet to the management interface on an affected system, causing a buffer overflow. The vulnerability is due to incorrect input validation in the authentication module of the...

CVE-2018-8214

creationtimestamp| type| source ---|---|--- 2018-06-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44915...

bioinformatics.org XSS vulnerability

Open Bug Bounty ID: OBB-634231 Description| Value ---|--- Affected Website:| bioinformatics.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ooxxtube.com XSS vulnerability

Open Bug Bounty ID: OBB-634136 Description| Value ---|--- Affected Website:| ooxxtube.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pagofacile.popso.it Open Redirect vulnerability

Open Bug Bounty ID: OBB-633865 Description| Value ---|--- Affected Website:| pagofacile.popso.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

alabamachild.org XSS vulnerability

Open Bug Bounty ID: OBB-633222 Description| Value ---|--- Affected Website:| alabamachild.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...