56 matches found
sac-bern.ch Cross Site Scripting vulnerability OBB-2859030
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-42056
Thales SafeNet Authentication Client (SAC) for Linux/Windows up to version 10.7.7 creates insecure temporary files in /tmp (eToken.hid, eToken.lock) and /var/tmp (eToken.cache) with static names and permissive permissions. This enables a local attacker to perform a symlink attack to overwrite arb...
CVE-2021-42056
Thales Safenet Authentication Client SAC for Linux and Windows through 10.7.7 creates insecure temporary hid and lock files allowing a local attacker, through a symlink attack, to overwrite arbitrary files, and potentially achieve arbitrary command execution with high privileges...
CVE-2021-42056: Improper Link Resolution Before File Access
Thales Safenet Authentication Client SAC for Linux and Windows through 10.7.7 creates insecure temporary hid and lock files allowing a local attacker, through a symlink attack, to overwrite arbitrary files, and potentially achieve arbitrary command execution with high privileges...
CVE-2022-27849
Sensitive Information Disclosure sac-export.csv in Simple Ajax Chat WordPress plugin = 20220115...
CVE-2022-27849
Sensitive Information Disclosure sac-export.csv in Simple Ajax Chat WordPress plugin = 20220115...
CVE-2022-27849: Exposure of Sensitive Information to an Unauthorized Actor
Sensitive Information Disclosure sac-export.csv in Simple Ajax Chat WordPress plugin = 20220115...
sac-einsiedeln.ch Cross Site Scripting vulnerability OBB-1229151
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
sac-vision.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1157790 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
sac.ac.kr XSS vulnerability
Open Bug Bounty ID: OBB-710610 Description| Value ---|--- Affected Website:| sac.ac.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...
sac-aarau.ch XSS vulnerability
Open Bug Bounty ID: OBB-636504 Description| Value ---|--- Affected Website:| sac-aarau.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
sac-kamor.ch XSS vulnerability
Open Bug Bounty ID: OBB-636501 Description| Value ---|--- Affected Website:| sac-kamor.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
sac-bern.ch XSS vulnerability
Open Bug Bounty ID: OBB-631872 Description| Value ---|--- Affected Website:| sac-bern.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
roxy.fr XSS vulnerability
Open Bug Bounty ID: OBB-551270 Description| Value ---|--- Affected Website:| roxy.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
sac-vision.net XSS vulnerability
Open Bug Bounty ID: OBB-210693 Description| Value ---|--- Affected Website:| sac-vision.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
sac-china.com XSS vulnerability
Vulnerable URL: http://www.sac-china.com/text.asp?keys=%22%3E%3CScRipT%3Ealert/OPENBUGBOUNTY/%3C%2FScrIpT%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...