50 matches found
mrs-escort.com Improper Access Control vulnerability OBB-3805634
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
mrs-escort.de Improper Access Control vulnerability OBB-3779955
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Karenderia MRS 5.3 Directory Traversal
==================================================================================================================================== | Title : Karenderia MRS v5.3 Directory Traversal Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...
CVE-2022-4143
An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4, and from 15.10 before 15.10.1 that allows for crafted, unapproved MRs to be introduced and merged without authorization...
CVE-2022-4143
An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4, and from 15.10 before 15.10.1 that allows for crafted, unapproved MRs to be introduced and merged without authorization...
CVE-2022-4143
Removed by vendor...
CVE-2022-4143: Time-of-check Time-of-use (TOCTOU) Race Condition
An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4, and from 15.10 before 15.10.1 that allows for crafted, unapproved MRs to be introduced and merged without authorization...
CVE-2022-4143
An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4, and from 15.10 before 15.10.1 that allows for crafted, unapproved MRs to be introduced and merged without authorization...
CVE-2022-4143
An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4, and from 15.10 before 15.10.1 that allows for crafted, unapproved MRs to be introduced and merged without authorization...
mrs-j.org Cross Site Scripting vulnerability OBB-3069750
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
mrs-j.org Cross Site Scripting vulnerability OBB-2427254
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
kg-mrs-diamond.net Cross Site Scripting vulnerability OBB-1454296
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
mrs-mexico.org.mx XSS vulnerability
Open Bug Bounty ID: OBB-696161 Description| Value ---|--- Affected Website:| mrs-mexico.org.mx Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...
Google Android - Unprotected MSRs in EL1 RKP Privilege Escalation Exploit
Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=980 As part of Samsung KNOX, Samsung phones include a security hypervisor called RKP Real-time Kernel Protection, running in EL2. This hypervisor is meant to ensure that the HLOS...
CVE-2015-0871
Cross-site scripting XSS vulnerability in Mrs. Shiromuku Perl CGI shiromukuu1GUESTBOOK 1.62 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-0871
Cross-site scripting XSS vulnerability in Mrs. Shiromuku Perl CGI shiromukuu1GUESTBOOK 1.62 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-0871
CVE-2015-0871 is a cross-site scripting vulnerability in the Perl CGI-based shiromuku(u1)GUESTBOOK bulletin board, affected in version 1.62 and earlier. The underlying issue allows an attacker to inject arbitrary script/HTML, potentially leading to arbitrary script execution in a user’s browser. ...
PT-2015-4929
Name of the Vulnerable Software and Affected Versions Mrs. Shiromuku Perl CGI shiromukuu1GUESTBOOK versions 1.62 and earlier Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via...
CVE-2015-0871: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Mrs. Shiromuku Perl CGI shiromukuu1GUESTBOOK 1.62 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...