preciousmoments.collectionhero.com Cross Site Scripting vulnerability OBB-3845139

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

precious-one.men-este.com Cross Site Scripting vulnerability OBB-2505780

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

preciousimpact.ch Improper Access Control vulnerability OBB-2251322

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Texas Gold-Dealer Mined for Payment Details in Months-Long Data Breach

A popular precious-metals dealer, JM Bullion, has been the victim of a payment-skimmer attack. The company’s response was less than solid gold — it took months to notify its users of the breach. The Dallas-based company sells gold, platinum, silver, copper and palladium bullion, in the form of...

GHSA-M2Q3-53FQ-7H66 Gollum Exposure of Sensitive Information

The Precious module in gollum before 4.0.1 allows remote attackers to read arbitrary files by leveraging the lack of a certain temporary-file check...

Gollum Precious Module Information Disclosure Vulnerability

Gollum is a Git-based wiki system. An information disclosure vulnerability exists in Gollum's Precious module, which allows remote attackers to read arbitrary files due to the program's failure to perform temporary file checks...

CVE-2015-7314

The Precious module in gollum before 4.0.1 allows remote attackers to read arbitrary files by leveraging the lack of a certain temporary-file check...

CVE-2015-7314

The Precious module in gollum before 4.0.1 allows remote attackers to read arbitrary files by leveraging the lack of a certain temporary-file check...

CVE-2015-7314

The Precious module in gollum before 4.0.1 allows remote attackers to read arbitrary files by leveraging the lack of a certain temporary-file check...

PT-2015-7520

Name of the Vulnerable Software and Affected Versions gollum versions prior to 4.0.1 Description The issue allows remote attackers to read arbitrary files due to a lack of a certain temporary-file check in the Precious module. Recommendations For versions prior to 4.0.1, update to version 4.0.1 o...

CVE-2015-7314: Exposure of Sensitive Information to an Unauthorized Actor

The Precious module in gollum before 4.0.1 allows remote attackers to read arbitrary files by leveraging the lack of a certain temporary-file check...

WordPress Fusion Engage Local File Disclosure

Fusion Engage is a commercial wordpress plugin sold by internet marketer and known scammer Precious Ngwu to.. I'm actually not sure. Something to do with video embedding. Anyway, it has a LFD. Here's the relevant code.. function fegetsvhtml global $wpdb, $videodb, $anndb;...