2516 matches found
Food Delivery Script SQL注入漏洞
Food Delivery Script is an online food ordering system. A security vulnerability exists in PHPJabbers Food Delivery Script version 3.0, which is caused by a SQL injection vulnerability in the "q" parameter of the index.php file...
Upgraded Q -> 2 from #273 [1692910023114]
Judge has assessed an item in Issue 273 as 2 risk. The relevant finding follows: L-01 --- The text was updated successfully, but these errors were encountered: All reactions...
q-games.com Cross Site Scripting vulnerability OBB-3594709
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SUSE-SU-2023:3338-1 Security update for openssl-1_0_0
This update for openssl-100 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. bsc1213853...
q-lingua.com Cross Site Scripting vulnerability OBB-3587058
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Upgraded Q -> 2 from #513 [1691698843467]
Judge has assessed an item in Issue 513 as 2 risk. The relevant finding follows: Issue 2 --- The text was updated successfully, but these errors were encountered: All reactions...
Quantum Q-Series SLP Detection
Binary data quantumq-seriesslpdetect.nbin...
Excessive time spent checking DH q parameter value
...
PT-2023-28069 · Unknown · Moosocial Moostore
Name of the Vulnerable Software and Affected Versions: mooSocial mooStore version 3.1.6 Description: A problematic issue was found in the software, affecting an unknown function of the file /search/index. The manipulation of the argument q leads to cross-site scripting. It is possible to launch t...
CVE-2023-4173: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in mooSocial mooStore 3.1.6. Affected is an unknown function of the file /search/index. The manipulation of the argument q leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this...
SUSE CVE-2023-3817
Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHcheck, DHcheckex or EVPPKEYparamcheck to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been...
FreeBSD : OpenSSL -- Excessive time spent checking DH q parameter value (bad6588e-2fe0-11ee-a0d1-84a93843eb75)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the bad6588e-2fe0-11ee-a0d1-84a93843eb75 advisory. - Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary:...
Upgraded Q -> 2 from #899 [1690501938379]
Judge has assessed an item in Issue 899 as 2 risk. The relevant finding follows: issue ! --- The text was updated successfully, but these errors were encountered: All reactions...
Upgraded Q -> 2 from #93 [1689707967381]
Judge has assessed an item in Issue 93 as 2 risk. The relevant finding follows: L-01 - no check on the deployedVaults mapping in the VaultFactory can lead to duplicate vaults being created Mitigation - add an if check to not recreate the same vault: ifdeployedVaultsvault revert.... --- The text w...
Upgraded Q -> 2 from #727 [1689056911947]
Judge has assessed an item in Issue 727 as 2 risk. The relevant finding follows: ERC20 revert due to sigs issue --- The text was updated successfully, but these errors were encountered: All reactions...
q-lingua.com Cross Site Scripting vulnerability OBB-3473271
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Exploit for Path Traversal in Gibbonedu Gibbon
Gibbon v25.0.0 - Local File Inclusion - CVE-2023-34598 Gibbon...
PT-2023-3377 · Siemens · Power Meter Sicam Q200 +1
Name of the Vulnerable Software and Affected Versions: POWER METER SICAM Q100 versions prior to V2.60 POWER METER SICAM Q200 affected versions not specified Description: A vulnerability has been identified in the web interface of the affected devices, making them vulnerable to Cross-Site Request...