6053 matches found
CVE-2020-14877
The CVE-2020-14877 entry affects Oracle Hospitality OPERA 5 Property Services Logging, specifically versions 5.5 and 5.6. The vulnerability is triggered through HTTP over the network, allowing a high-privilege attacker to compromise the service and potentially perform unauthorized creation, delet...
CVE-2020-14858
Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications component: Logging. Supported versions that are affected are 5.5 and 5.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...
CVE-2020-14858
CVE-2020-14858 affects Oracle Hospitality OPERA 5 Property Services (Logging) for versions 5.5 and 5.6. The vulnerability is described as enabling a high-privileged attacker with network access over HTTP to compromise the service, with exploitation requiring a user interaction from someone other ...
PT-2020-4491
Name of the Vulnerable Software and Affected Versions Oracle Hospitality OPERA 5 Property Services versions 5.5 and 5.6 Description The issue is related to insufficient input validation in the Logging component of Oracle Hospitality OPERA 5 Property Services. This easily exploitable vulnerability...
CVE-2020-14858: Undefined Security Weakness
Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications component: Logging. Supported versions that are affected are 5.5 and 5.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...
PT-2020-4490
Name of the Vulnerable Software and Affected Versions Oracle Hospitality OPERA 5 Property Services versions 5.5 and 5.6 Description The issue is related to insufficient input validation in the Logging component of Oracle Hospitality OPERA 5 Property Services. This allows a high-privileged attacke...
CVE-2020-14877: Undefined Security Weakness
Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications component: Logging. Supported versions that are affected are 5.5 and 5.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...
PT-2020-6971 · Python +7 · Python +7
Name of the Vulnerable Software and Affected Versions: Python versions prior to 3.9.2 Description: The issue is related to the read ints function in the plistlib.py component of the Python interpreter, which is vulnerable to uncontrolled resource consumption. This can be exploited by a remote...
Prototype Pollution
Overview chart.js is a Simple HTML5 charts using the canvas element. Affected versions of this package are vulnerable to Prototype Pollution. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options or the defaults options are deep...
ekar.property Cross Site Scripting vulnerability OBB-1403692
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
canadaresidentialpropertyapplication.com Cross Site Scripting vulnerability OBB-1402700
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
USN-4566-1 cyrus-imapd vulnerabilities
It was dicovered that Cyrus IMAP Server could execute arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar property name. An attacker could use this vulnerability to cause a crash or possibly execute arbitrary code. CVE-2019-11356 It was discovered that the Cyrus IMA...
Arbitrary Code Execution
The CalDAV feature in httpd is vulnerable to arbitrary code execution. It allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar property name...
BugPoC: LFI to steal /etc/passwd - Bypass filter in the <meta property="og:image"> tag via redirect and much more
Hey Team, Good &simple challenge. Wasn't able to find time to attempt this initially but was able to go about it today. The explanation of the bug with the POC is hosted on bugpoc.com Here is the id & password as requested - BugPoC ID : bp-wHwB2qAF - Password : dARKlYbAnana89 POC Screenshot using...
kavanaghproperty.ie Cross Site Scripting vulnerability OBB-1377274
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-9486
In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive property values. When a flow was triggered, the flow definition configuration JSON was printed, potentially containing sensitive values in plaintext...
Default configuration
In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive property values. When a flow was triggered, the flow definition configuration JSON was printed, potentially containing sensitive values in plaintext...
CVE-2020-9486
In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive property values. When a flow was triggered, the flow definition configuration JSON was printed, potentially containing sensitive values in plaintext...
Security Bulletin: Vulnerabilities in Ruby on Rails affect IBM License Metric Tool v9.
Summary Vulnerabilities discovered in Ruby on Rails component affect IBM License Metric Tool v9. Vulnerability Details CVEID: CVE-2020-8184 DESCRIPTION: Rack could allow a remote attacker to bypass security restrictions, caused by the lack of validation/integrity check security for cookies. By...
