149 matches found
CVE-2022-41376
Metro UI v4.4.0 to v4.5.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Javascript function...
CVE-2022-41376
The CVE-2022-41376 entry relates to a reflected cross-site scripting (XSS) vulnerability in Metro UI. Affected software includes Metro UI versions 4.4.0 through 4.5.0/4.5.1, where user-supplied input is not properly sanitized before rendering in the Javascript/textarea component, enabling injecti...
Metro UI 跨站脚本漏洞
Microsoft Metro UI v4.4.0 and later, and v4.5.0 and earlier, is vulnerable to a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of user-supplied data, which could be exploited to inject web or html code...
PT-2022-6359 · Dell Emc · Dell Emc Metro Node
Name of the Vulnerable Software and Affected Versions: Dell EMC Metro node versions prior to 7.1 Description: The issue is related to incorrect code generation management in the system, allowing a remote attacker to execute arbitrary commands. An authenticated nonprivileged attacker could...
Okta Hackers Behind Twilio and Cloudflare Attacks Hit Over 130 Organizations
The threat actor behind the attacks on Twilio and Cloudflare earlier this month has been linked to a broader phishing campaign aimed at 136 organizations that resulted in a cumulative compromise of 9,931 accounts. The activity has been condemned 0ktapus by Group-IB because the initial goal of the...
PT-2022-22981 · Inductive Automation · Inductive Automation Ignition
Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition version 8.1.15 b2022030114 Description: This issue allows remote attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authenticati...
ambercreekmetro.org Cross Site Scripting vulnerability OBB-2505333
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
delhimetrorail.info Cross Site Scripting vulnerability OBB-2361879
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Ransomware attack disrupts Metro Vancouver’s payment systems
By Deeba Ahmed The payments systems remained ineffective for three days after the ransomware attack, but payment data is safe, claims TransLink. This is a post from HackRead.com Read the original post: Ransomware attack disrupts Metro Vancouvers payment systems...
metro-motors.ca Improper Access Control vulnerability OBB-1367024
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Fedora 31 : phpMyAdmin (2020-a1b4afe7b5)
Version 5.0.1 2020-01-07 - issue 15719 Fixed error 500 when browsing a table when $cfg'LimitChars' used a string and not an int value - issue 14936 Fixed display NULL on numeric fields has showing empty string since 5.0.0 - issue 15722 Fix get Database structure fails with PHP error on replicated...
metrofamilymagazine.com XSS vulnerability
Open Bug Bounty ID: OBB-699828 Description| Value ---|--- Affected Website:| metrofamilymagazine.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...
metro-oa.com XSS vulnerability
Open Bug Bounty ID: OBB-690093 Description| Value ---|--- Affected Website:| metro-oa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unt...
Ensure Highly Reliable First Mile Connectivity with Akamai Direct Connect
As linear OTT video services become mainstream, many broadcasters and online video distributors are increasingly looking for new ways to enhance service reliability. Many who manage their own origin infrastructures within a datacenter environment are seeking added assurance for ingest of their...
metro.ethernetfiberinternetservices.com XSS vulnerability
Open Bug Bounty ID: OBB-671231 Description| Value ---|--- Affected Website:| metro.ethernetfiberinternetservices.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...
metro.co.uk Improper Access Control vulnerability
Open Bug Bounty ID: OBB-628544 Description| Value ---|--- Affected Website:| metro.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...
Peanut Metro WIFI APP has logic design flaws
Peanut Metro WIFI APP is a free wifi software for metro launched by Peanut Technology. There is a logical design vulnerability in Peanut Metro WIFI APP. Attackers can reset any password by forgetting the password function and utilizing packet capture and blasting to obtain the verification code...
metro-portal.rtl.hr XSS vulnerability
Open Bug Bounty ID: OBB-574425 Description| Value ---|--- Affected Website:| metro-portal.rtl.hr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Bad Rabbit: New Ransomware Attack Rapidly Spreading Across Europe
A new widespread ransomware attack is spreading like wildfire around Europe and has already affected over 200 major organisations, primarily in Russia, Ukraine, Turkey and Germany, in the past few hours. Dubbed "Bad Rabbit," is reportedly a new Petya-like targeted ransomware attack against...
Yandex.Metro - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Yandex.Metro published at the 'play' market has multiple vulnerabilities...