42 matches found
CVE-2021-38357 SMS OVH <= 0.1 Reflected Cross-Site Scripting
The SMS OVH WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the position parameter found in the /sms-ovh-sent.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.1...
CVE-2021-38357 SMS OVH <= 0.1 Reflected Cross-Site Scripting
The SMS OVH WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the position parameter found in the /sms-ovh-sent.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.1...
CVE-2021-38357
CVE-2021-38357 affects the WordPress plugin SMS OVH (versions up to and including 0.1). The Reflected Cross‑Site Scripting vulnerability originates in the position parameter in the file ~/sms-ovh-sent.php, enabling injection of arbitrary web scripts. Connected sources consistently describe this i...
CVE-2021-38357: Improper Neutralization of Input During Web Page Generation
The SMS OVH WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the position parameter found in the /sms-ovh-sent.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.1...
SMS OVH <= 0.1 - Reflected Cross-Site Scripting
The plugin is vulnerable to Reflected Cross-Site Scripting via the position parameter found in the /sms-ovh-sent.php file which allows attackers to inject arbitrary web scripts...
WordPress SMS OVH plugin <= 0.1 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress SMS OVH plugin versions = 0.1. Solution This plugin has been closed as of August 24, 2021 and is not available for download. This closure is temporary, pending a full review...
The Malwarebytes 2021 State of Malware report: Lock and Code S02E04
This week on Lock and Code, we discuss the top security headlines generated right here on Labs. In addition, we tune in to a special presentation from Adam Kujawa about the 2021 State of Malware report, which analyzed the top cybercrime goals of 2020 amidst the global pandemic. If you just pay...
OVH cloud datacenter destroyed by fire
A fire in one of the OVH datacenters has destroyed one datacenter and knocked two others offline. It took 100 firefighters and 43 fire trucks to fight the fire in the five-story building. Even though the fire department was quick to respond, and the fire was brought under control relatively...
Top sites affected after OVH data center catches disastrous fire
By Waqas OVH data center in France has caught fire after which top websites around the world suffered service outage. Here's what we know so far. This is a post from HackRead.com Read the original post: Top sites affected after OVH data center catches disastrous fire...
campingcnn.cluster021.hosting.ovh.net Cross Site Scripting vulnerability OBB-1400674
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
5 Popular Web Hosting Services Found Vulnerable to Multiple Flaws
A security researcher has discovered multiple one-click client-side vulnerabilities in the some of the world's most popular and widely-used web hosting companies that could have put millions of their customers as well as billions of their sites' visitors at risk of hacking. Independent researcher...
5 Popular Web Hosting Services Found Vulnerable to Multiple Flaws
A security researcher has discovered multiple one-click client-side vulnerabilities in the some of the world's most popular and widely-used web hosting companies that could have put millions of their customers as well as billions of their sites' visitors at risk of hacking. Independent researcher...
ovh.com XSS vulnerability
Open Bug Bounty ID: OBB-546398 Description| Value ---|--- Affected Website:| ovh.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ovh.veracruz.gob.mx XSS vulnerability
Open Bug Bounty ID: OBB-537277 Description| Value ---|--- Affected Website:| ovh.veracruz.gob.mx Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...
ovh.de XSS vulnerability
Open Bug Bounty ID: OBB-435576 Description| Value ---|--- Affected Website:| ovh.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ovh-hosting.fi XSS vulnerability
Open Bug Bounty ID: OBB-434781 Description| Value ---|--- Affected Website:| ovh-hosting.fi Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ovh.com XSS vulnerability
Open Bug Bounty ID: OBB-336429 Description| Value ---|--- Affected Website:| ovh.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ovh.com XSS vulnerability
Vulnerable URL: http://www.ovh.com/soapi/en/?display=%27-confirmopenbugbounty-%27 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 08.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2647 VIP website status:| Yes...
Dyn DDoS Work of Script Kiddies, Not Politically Motivated Hackers
New research on the source of Friday’s DDoS attack against DNS provider Dyn indicates that script kiddies are likely responsible, rather than a politically motivated actor. Researchers at Flashpoint dismissed numerous claims of responsibility that separately linked the attack to the Russian...
World's largest 1 Tbps DDoS Attack launched from 152,000 hacked Smart Devices
Do you know — Your Smart Devices may have inadvertently participated in a record-breaking largest cyber attack that Internet has just witnessed. If you own a smart device like Internet-connected televisions, cars, refrigerators or thermostats, you might already be part of a botnet of millions of...