5791 matches found
CVE-2021-27294
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
cscda.org Cross Site Scripting vulnerability OBB-2767418
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Stripe: Mass account takeover!
@akashhamal0x01 discovered an Organization Owner could update the email address of a member of their organization in TaxJar. This could have allowed an attacker to take over a victim’s account if the victim belonged to the attacker’s organization. The vulnerability was caused by the ability to ed...
mavoisatum.org Cross Site Scripting vulnerability OBB-2762101
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Tech support scammers caught by their own cameras
A Youtuber has hacked into the CCTV cameras of an office used by tech support scammers and reported them to the police. The video feed of what is going on in that office ends with the arrest of the scammers. CCTV The Youtuber, acting under the handle Scambaiter, turned his attention to Punjab in...
CVE-2021-33914
CVE-2021-33914 is detailed in Veracode as a denial-of-service vulnerability in libspf2, caused by an uncaught floating-point exception in ACLosslessScan::ParseMCU (aclosslessscan.cpp) that can crash the application. The connected Alpine entry is a placeholder reserved record with no new technical...
stembrasil.org Cross Site Scripting vulnerability OBB-2720889
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-27627
Cross-site scripting vulnerability in Organization's Information of Cybozu Garoon 4.10.2 to 5.5.1 allows a remote attacker to execute an arbitrary script on the logged-in user's web browser...
CVE-2022-27627
Cross-site scripting vulnerability in Organization's Information of Cybozu Garoon 4.10.2 to 5.5.1 allows a remote attacker to execute an arbitrary script on the logged-in user's web browser...
nobleminds.org Cross Site Scripting vulnerability OBB-2716528
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
employindy.org Cross Site Scripting vulnerability OBB-2711266
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2015-4136
The CVE-2015-4136 entry is supported by Atlassian advisories BAM-16023 (and BAM-16023 cross‑references) describing a vulnerability in Bamboo 5.8.0/5.8.1 where the Windows Stock Image (Windows Server 2012 R2) AMI included a publicly known password for the ‘bamboo’ user. This allowed SSH access to ...
CVE-2018-10006
Technical details for CVE-2018-10006 are not publicly available in the provided documents. Monitor for updates as more information may be released.
CVE-2021-39120
CVE-2021-39120 affects Atlassian Jira Server/Data Center prior to version 8.18.0. The vulnerability is an information disclosure in the comment notification functionality that allows remote attackers to learn when a restricted comment is removed from an issue. Affected versions are listed as
CVE-2018-18855
CVE-2018-18855 describes a denial-of-service in spray-json (Lightbend Spray) via an uncontrolled recursion in JsonParser during deep nesting. IBM’s bulletin ties this to IBM Cloud APM (Base Private 8.1.4 and Advanced Private 8.1.4). Root cause: JsonParser’s unbounded recursion allows resource exh...
Malicious code in @flameshot-org/fetlife-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfc208be31b8f932d6175ac98e7ddc5249c25d6e735a9af5a2c8266770cb9a45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Grafana 授权问题漏洞
Grafana is Grafana open source set of open source monitoring tools that provide a visual monitoring interface . The tool is mainly used to monitor and analyze Graphite, InfluxDB and Prometheus. An authorization issue vulnerability exists in Grafana version 8.4.3. An attacker can exploit this...
teveta.org.zm Cross Site Scripting vulnerability OBB-2652286
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
knsi.org Cross Site Scripting vulnerability OBB-2650629
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...