CVE-2020-11003

Oasis before version 2.15.0 has a potential DNS rebinding or CSRF vulnerability. If you're running a vulnerable application on your computer and an attacker can trick you into visiting a malicious website, they could use DNS rebinding and CSRF attacks to read/write to vulnerable applications. Thi...

CVE-2020-11003

Oasis before version 2.15.0 has a potential DNS rebinding or CSRF vulnerability. If you're running a vulnerable application on your computer and an attacker can trick you into visiting a malicious website, they could use DNS rebinding and CSRF attacks to read/write to vulnerable applications. Thi...

Cross site request forgery (csrf)

Oasis before version 2.15.0 has a potential DNS rebinding or CSRF vulnerability. If you're running a vulnerable application on your computer and an attacker can trick you into visiting a malicious website, they could use DNS rebinding and CSRF attacks to read/write to vulnerable applications. Thi...

CVE-2020-11003 CSRF and DNS Rebinding in Oasis

Oasis before version 2.15.0 has a potential DNS rebinding or CSRF vulnerability. If you're running a vulnerable application on your computer and an attacker can trick you into visiting a malicious website, they could use DNS rebinding and CSRF attacks to read/write to vulnerable applications. Thi...

CVE-2020-11003

The CVE-2020-11003 entry concerns the Oasis open-source application. Affected software is Oasis before version 2.15.0, where a DNS rebinding and CSRF vulnerability exists that can allow an attacker to read/write to vulnerable applications when a user is tricked into visiting a malicious site. The...

oasis-estate.jp Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3712 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting oasis-estate.jp website and its users. Following...

oasis-a.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1008535 Security Researcher metamorfosec Helped patch 1962 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting oasis-a.com website a...

oasis-verdon.com XSS vulnerability

Open Bug Bounty ID: OBB-717314 Description| Value ---|--- Affected Website:| oasis-verdon.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

oasis-open.org XSS vulnerability

Open Bug Bounty ID: OBB-550804 Description| Value ---|--- Affected Website:| oasis-open.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Adobe Patches Flash Zero Day Exploited by Black Oasis APT

Adobe today released an out-of-band Flash Player update addressing a zero-day vulnerability being exploited by a little-known Middle Eastern APT group. The group known as Black Oasis was, as recently as this month, using exploits for the flaw to drop FinSpy as a payload. Sold by the controversial...

oasis-open.org XSS vulnerability

Vulnerable URL: https://www.oasis-open.org/search/%22%3e%3csvg%20onload=alert%22OPENBUGBOUNTY%22%3e Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 99998 VIP website status:| No Coordinated Disclosure Timeline:...

NSA-Backed OpenC2.org Aims to Defend Systems at Machine Speed

NEW YORK–The dynamics of a cyberattack often include speed, automation and adaptive tradecraft. Mounting an effective defense, however, isn’t always fast enough. To help even the score, a group led by the National Security Agency called OpenC2.org is developing an open, standardized computer...

Fragancias Oasis - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Fragancias Oasis published at the 'play' market has multiple vulnerabilities...

oasis-geoloc.fr Open Redirect vulnerability

Vulnerable URL: http://www.oasis-geoloc.fr/dhtml/redirection.php?url=http://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:21 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

[SECURITY] Fedora 20 Update: xerces-j2-2.11.0-17.fc20

Welcome to the future! Xerces2 is the next generation of high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces introduces the Xerces Native Interface XNI, a complete framework f or building parser components and configurations that is extremely...

A Cool Debate 1.0.3 Component Joomla Local File Inclusion

No description provided by source. A Cool Debate 1.0.3 Component Joomla Local File Inclusion ========================================================================================= - Discovered by : Chip D3 Bi0s - Email : chipdebiosatgmaildotcom - Group : LatinHackTeam - Date : 18 june 2011 -...

[SECURITY] Fedora 16 Update: opensaml-2.3-6.fc16

OpenSAML is an open source implementation of the OASIS Security Assertion Markup Language Specification. It contains a set of open source C++ classes that support the SAML 1.0, 1.1, and 2.0 specifications...

Fedora Update for opensaml FEDORA-2011-12890

Check for the Version of opensaml OpenVAS Vulnerability Test Fedora Update for opensaml FEDORA-2011-12890 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 15 Update: opensaml-2.3-4.fc15

OpenSAML is an open source implementation of the OASIS Security Assertion Markup Language Specification. It contains a set of open source C++ classes that support the SAML 1.0, 1.1, and 2.0 specifications...

Joomla! Component A Cool Debate 1.0.3 - Local File Inclusion

Joomla! Component A Cool Debate 1.0.3 - Local File Inclusion A Cool Debate 1.0.3 Component Joomla Local File Inclusion ========================================================================================= - Discovered by : Chip D3 Bi0s - Email : chipdebiosatgmaildotcom - Group : LatinHackTeam...