1037 matches found
Directory traversal
Unathenticated directory traversal in the ReceiverServlet class doPost method can lead to arbitrary remote code execution in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...
CVE-2020-24624
Unathenticated directory traversal in the DownloadServlet class execute method can lead to arbitrary file reads in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...
CVE-2020-24626
Unathenticated directory traversal in the ReceiverServlet class doPost method can lead to arbitrary remote code execution in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...
CVE-2020-24625
Summary: CVE-2020-24625 is an unauthenticated directory traversal vulnerability in the ReceiverServlet doGet() of Hewlett Packard Enterprise Pay per Use (PPU) Utility Computing Service (UCS) Meter, up to version 1.9 (vulnerability exists prior to 1.9). The root cause is lack of proper validation ...
CVE-2020-24625
Unathenticated directory traversal in the ReceiverServlet class doGet method can lead to arbitrary file reads in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...
CVE-2020-24624
Unathenticated directory traversal in the DownloadServlet class execute method can lead to arbitrary file reads in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...
(0Day) Hewlett Packard Enterprise Pay per use UCS Meter DownloadServlet execute Directory Traversal Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Hewlett Packard Enterprise Pay per use UCS Meter. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DownloadServlet class. The issue results fr...
(0Day) Hewlett Packard Enterprise Pay per use UCS Meter ReceiverServlet doPost Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Pay per use UCS Meter. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ReceiverServlet class. The issue results from the...
pay-net.net Cross Site Scripting vulnerability OBB-1305632
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
vBulletin Cross-Site Scripting Vulnerability (CNVD-2020-50939)
vBulletin is a suite of forum programs that can be customized to suit your needs. A cross-site scripting vulnerability exists in the Admin CP of vBulletin 5.6.3. The vulnerability can be exploited to conduct cross-site scripting attacks via the "Pay to subscribe to email notifications" field in t...
Online Trade - Online trading and cryptocurrency investment system security breach
Brynamics Online Trade is a system for trading cryptocurrencies online. A security vulnerability exists in Brynamics Online Trade. A remote attacker can exploit this vulnerability by making a direct request to /dashboard/addplan, /dashboard/paywithcard/charge, /dashboard/withdrawal, or...
Lightning Network Daemon Security Vulnerability
A security vulnerability exists in Lightning Network Daemon lnd versions prior to 0.7 that stems from incorrect access control in the program. An attacker could exploit the vulnerability by not paying or underpaying the total cash amount of a transaction...
h1-ctf: h1-ctf writeup , finally paid the payments by chaining multiple bugs
Summary: Ultimate aim is to pay the payments of hackerone using bounty pay with no use privileges at starting. Given scope is : .bountypay.h1ctf.com Enumerated subdomains are : 1. www.bountypay.h1ctf.com 2. app.bountypay.h1ctf.com 3. staff.bountypay.h1ctf.com 4. api.bountypay.h1ctf.com 5...
pay-it-less.co.uk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1147344 Security Researcher ELProfesor Helped patch 2814 vulnerabilities Received 8 Coordinated Disclosure badges Received 107 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting pay-it-less.co.uk...
dpd-paypal-ap (>=0.0.1, <=0.0.9), paypal-pay (0.1.1) potentially affected by CVE-2020-7643 via paypal-adaptive (>=0.1.1, <=0.4.2)
paypal-adaptive NPM version =0.1.1, =0.0.1, =0.0.9 - paypal-pay 0.1.1 Source cves: CVE-2020-7643 Source advisory: SNYK:JS-PAYPALADAPTIVE-565089...
pay-stub-now.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1137364 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting pay-stub-now.com website a...
WordPress Event-Registration 5.43 Arbitrary File Upload
Exploit Title : WordPress Event-Registration Plugins 5.43 Arbitrary File Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 30/03/2020 Vendor Homepage : wp-event-organiser.com Software Links : captainform.com/wordpress-event-registration-plugin/...
SQL Injection Vulnerability in php Simple Sweeping Code Payment Education Fee System in***.php
php Simple Sweep Pay Education Fee System is a query and fee software developed in Php+MySql. php simple code payment education fee system in.php SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...
Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-40822)
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A security vulnerability exists in Samsung mobile devices, which can be exploited by attackers to bypass factory settings recovery protection FRP with the help of t...
