CVE-2016-1000224

The connected advisories describe a vulnerability in ezseed-transmission: affected versions download/run a script over HTTP, enabling a privileged-network attacker to perform a Man‑in‑the‑Middle attack and replace the script with malicious code, compromising the system running ezseed-transmission...

CVE-2015-7982

Vulnerability details found: The gm library (Node.js wrapper) versions prior to 1.21.1 are affected by a command-injection flaw. The issue occurs when user input is passed to gm.compare() without proper sanitization before invoking the GraphicsMagick binary. Remediation: update to version 1.21.1 ...

CVE-2014-8881

Summary: The connected advisories indicate a Regular Expression Denial of Service (ReDoS) affecting all versions of the Python package bleach during its sanitize function. The issue is not tied to a specific version release in the provided documents; the advisories state all versions are vulnerab...

CVE-2016-1000226

The connected advisory GHSA-7F59-X49P-V8MQ documents a Cross-Site Scripting vulnerability in swagger-ui. Affected versions of swagger-ui are vulnerable to XSS in both the consumes and produces parameters of the swagger JSON document for a given API. Additionally, an attacker can trick users into ...

CVE-2013-7035

Technical details for CVE-2013-7035 are not publicly available in the provided documents; the CVE entry appears reserved. Monitor for updates.

CVE-2021-27366

Technical details for CVE-2021-27366 are not publicly available in the provided documents. Monitor for updates.

CVE-2014-3143

CVE-2014-3143 is not just a placeholder; connected documents describe multiple curl/libcurl vulnerabilities. The issues involve memory safety in path handling and hostname parsing: (1) sanitize_cookie_path() may index memory with -1 when a path is a single double-quote, destroying heap memory; (2...

CVE-2017-1307

Technical details for CVE-2017-1307 are not publicly available in the provided documents. Monitor for updates as new information may be published later.

CVE-2021-11191

Technical details for CVE-2021-11191 are not publicly available in the provided documents. Monitor for updates; no affected products, exploit info, or remediation details are stated in the supplied material.

CVE-2021-11192

Technical details for CVE-2021-11192 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-92252

CVE-2021-92252 is listed under cURL vulnerabilities as "Wrong content via metalink not discarded". The connected FreeBSD VuXML/Nessus entry confirms this CVE-2021-92252 variant but provides no additional technical details, affected versions, impact, or remediation in the provided documents. No ex...

CVE-2021-92254

CVE-2021-92254 is documented in the connected FreeBSD VuXML entry as "Bad connection reuse due to flawed path name checks" for the cURL project. The Nessus plugin compiles multiple cURL vulnerabilities and explicitly lists this CVE among them. In the provided connected documents, the affected sof...

Zulip server 安全漏洞

Zulip server is an open source team chat application from Zulip USA. zulip server has a security vulnerability that stems from the fact that zlip Server deployments that reside in multiple organizations are vulnerable to attacks where an invitation created in one organization possibly a role with...

HackerOne: [Bypass] Ability to invite a new member in sandbox Organization

Summary: Able to bypass the restriction set in Organization sandbox automatically created when you created sandbox program to send an invite to another security researcher. Description: In the default UI of sandboxHackerone Organization, inviting another security researcher is restricted ex.:...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

enoikodimiourgies.com Cross Site Scripting vulnerability OBB-2377651

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

Spanish Police Arrest SIM Swappers Who Stole Money from Victims Bank Accounts

Spain's National Police Agency, the Policía Nacional, said last week it dismantled an unnamed cybercriminal organization and arrested eight individuals in connection with a series of SIM swapping attacks that were carried out with the goal of financial fraud. The suspects of the crime ring...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

TikTok: Instance Page DOS within Organization on TikTok Ads

A vulnerability was found on the Instance Page service of TikTok Ads, which would allow an Operator to perform a Denial of Service DoS on the Front End of only their own organization. We thank @arsenelupin for reporting this to our team...