UBUNTU-CVE-2018-8012

No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to the leader...

DEBIAN-CVE-2018-8012

No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to the leader...

stonecountyleader.com XSS vulnerability

Open Bug Bounty ID: OBB-605327 Description| Value ---|--- Affected Website:| stonecountyleader.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

local.timesleader.com XSS vulnerability

Open Bug Bounty ID: OBB-558030 Description| Value ---|--- Affected Website:| local.timesleader.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

openthread/ip6-send-fuzzer: Stack-buffer-overflow in ot::NetworkData::ServerTlv::GetServer16

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5507424543834112 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type:...

openthread: Stack-buffer-overflow in ot::NetworkData::PrefixTlv::GetSubTlvs

Detailed report: https://oss-fuzz.com/testcase?key=5490815742771200 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7fb823a8eb22 Crash...

openthread: Stack-buffer-overflow in ot::NetworkData::Leader::AddHasRoute

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5225417852059648 Project: openthread Fuzzer: aflopenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow...

openthread: Stack-buffer-overflow in ot::NetworkData::HasRouteEntry::GetRloc

Detailed report: https://oss-fuzz.com/testcase?key=4983359669272576 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerasanopenthreaduntrusted Platform Id: linux Crash Type: Stack-buffer-overflow READ 2 Crash...

unionleader.com XSS vulnerability

Open Bug Bounty ID: OBB-286038 Description| Value ---|--- Affected Website:| unionleader.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Akamai Is Named A Leader In Gartner's Magic Quadrant For Web Application Firewalls

"Don't work for recognition, but do work worthy of recognition" - H. Jackson Brown. A friend sent this quote to me after I explained to her my ambivalence about being recognized by Gartner as a "Leader" in their Web Application Firewall Magic Quadrant. I had mixed feelings because I wanted to...

groupe-leader.eu XSS vulnerability

Vulnerable URL: http://www.groupe-leader.eu/search-353.html?mot=%22%3Eblub%3Csvg/onload=alert/OPENBUGBOUNTY/%3E%22%3Eblub%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.08.2017 Vulnerability type:| XSS Vulnerability status:|...

groupe-leader.fr XSS vulnerability

Vulnerable URL: http://www.groupe-leader.fr/search-353.html?mot=%27%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 15:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

classifieds.argusleader.com XSS vulnerability

Vulnerable URL: http://classifieds.argusleader.com/category.php?ft=OPENBUGBOUNTY" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

login.argusleader.com XSS vulnerability

Vulnerable URL: https://login.argusleader.com/PSIF-GUP/authenticate/?cancel-url=...

unionleader.com XSS vulnerability

Vulnerable URL: http://www.unionleader.com/apps/pbcs.dll/search?crit=...

VBScan 0.1.7 - Black Box vBulletin Vulnerability Scanner

OWASP VBScan short for VBulletin Vulnerability Scanner is an opensource project in perl programming language to detect VBulletin CMS vulnerabilities and analyses them . Why OWASP VBScan ? If you want to do a penetration test on a vBulletin Forum, OWASP VBScan is Your best shot ever! This Project ...

Japan's Softbank buys semiconductor giant ARM for $32 Billion in Cash

Japanese telecommunication giant SoftBank has confirmed that the company intends to acquire UK chip designer ARM Holdings for almost $32 Billion £24.3 Billion in an all-cash deal. ARM has also agreed to this offer from SoftBank and said that its board would recommend the all-cash deal to...

Notilus Travel Solution Software 2012 R3 - SQL Injection

Exploit Title: Notilus SQL injection Product: Notilus travel solution software Vulnerable Versions: 2012 R3 Tested Version: 2012 R3 Advisory Publication: 03/06/2016 Vulnerability Type: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' CWE-89 CVE Reference: NONE...

Notilus Travel Solution Software 2012 R3 - SQL Injection

Exploit for php platform in category web applications Exploit Title: Notilus SQL injection Product: Notilus travel solution software Vulnerable Versions: 2012 R3 Tested Version: 2012 R3 Advisory Publication: 03/06/2016 Vulnerability Type: Improper Neutralization of Special Elements used in an SQL...

Notilus 2012 R3 SQL Injection

Exploit Title: Notilus SQL injection Product: Notilus travel solution software Vulnerable Versions: 2012 R3 Tested Version: 2012 R3 Advisory Publication: 03/06/2016 Vulnerability Type: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' CWE-89 CVE Reference: NONE...