betrayalbroadway.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1021081 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting betrayalbroadway.com...

Popular Apps on Google Play Store Remain Unpatched

Most people think if they keep their mobile apps updated to the latest version, they also are patching for critical vulnerabilities. Not so, said researchers from Check Point Software, which discovered that outdated code—including known vulnerabilities—are still present in hundreds of popular app...

lematin.ma Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1019765 Security Researcher yassinehmimou2 Helped patch 68 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting lematin.ma website and its users. Following...

CVE-2019-16761

A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the [email protected] npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork from the SLP consensus. All versions 1.0....

heilindasia.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1016337 Security Researcher MohanSathwik Helped patch 4 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting heilindasia.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of t...

secure.tickmill.co.uk Open Redirect vulnerability

Open Bug Bounty ID: OBB-1015376 Security Researcher Spam404 Helped patch 16365 vulnerabilities Received 9 Coordinated Disclosure badges Received 69 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting secure.tickmill.co.uk...

Magento Warns E-Commerce Sites to Upgrade ASAP to Prevent Attacks

The popular e-commerce platform Magento is urging web administrators to install its latest security update in order to defend against malicious attacks in the wild that could exploit a critical remote code-execution vulnerability. While the company didn’t specify what kinds of potential attacks...

binimarina.com Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3637 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting binimarina.com website and its users. Following coordinat...

accionpower.com Cross Site Scripting vulnerability

Security Researcher MrRain1996 Helped patch 915 vulnerabilities Received 4 Coordinated Disclosure badges Received 9 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting accionpower.com website and its users. Following...

Security Bulletin: Vulnerability in Linux Kernel affects IBM Netezza Host Management

Summary Linux Kernel is used by IBM Netezza Host Management. IBM Netezza Host Management has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-14835 DESCRIPTION: Linux could allow a local guest-authenticated attacker to gain elevated privileges on the system, caused by a buffer...

Important: Red Hat Security Advisory: patch security update

An update for patch is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

mwcschedule.mcgill.ca Cross Site Scripting vulnerability

Security Researcher Gh05tPT Helped patch 6835 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting mwcschedule.mcgill.ca website and its users. Following...

rentals.oglethorpe.edu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1008338 Security Researcher devl00p Helped patch 3018 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting rentals.oglethorpe.edu...

aw.by Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1006836 Security Researcher amlnspqr Helped patch 1852 vulnerabilities Received 7 Coordinated Disclosure badges Received 37 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting aw.by website and its...

knightfrank.co.uk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1006067 Security Researcher 4NCURZE Helped patch 1424 vulnerabilities Received 7 Coordinated Disclosure badges Received 12 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting knightfrank.co.uk website...

ch10.co.il Improper Access Control vulnerability

Security Researcher geeknik Helped patch 8584 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting ch10.co.il website and its users. Following coordinated an...

GLSA-201910-01 : PHP: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201910-01 PHP: Arbitrary code execution A underflow in envpathinfo in PHP-FPM under certain configurations can be exploited to gain remote code execution. Impact : A remote attacker, by sending special crafted HTTP requests, could...

elmo.alaska.edu Open Redirect vulnerability

Open Bug Bounty ID: OBB-1004933 Security Researcher devl00p Helped patch 3025 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting elmo.alaska.edu website...

ecampus.emerson.edu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1003117 Security Researcher devl00p Helped patch 2703 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting ecampus.emerson.edu...

PHP: Arbitrary code execution

Background PHP is an open source general-purpose scripting language that is especially suited for web development. Description A underflow in envpathinfo in PHP-FPM under certain configurations can be exploited to gain remote code execution. Impact A remote attacker, by sending special crafted HT...