CVE-2021-27220

An issue was discovered in PRTG Network Monitor before 21.1.66.1623. By invoking the screenshot functionality with prepared context paths, an attacker is able to verify the existence of certain files on the filesystem of the PRTG's Web server...

CVE-2021-27220

PRTG Network Monitor before 21.1.66.1623 is affected by an information disclosure vulnerability: invoking the screenshot function with prepared context paths can cause verification of certain files on the web server filesystem. Root cause is excessive disclosure via the screenshot feature. Impact...

Paessler PRTG Network Monitor 安全漏洞

Paessler PRTG Network Monitor is a full-featured network monitoring and management software from Paessler, Germany. A security vulnerability exists in PRTG Network Monitor before 21.1.66.1623, which can be exploited by an attacker to invoke the screenshot function by using a prepared context path...

ceskatelevize.cz Cross Site Scripting vulnerability OBB-1967838

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| ceskatelevize.cz ---|--- Open Bug Bount...

[SECURITY] Fedora 34 Update: gnome-screenshot-40~rc-1.fc34

gnome-screenshot lets you take pictures of your screen...

Fedora: Security Advisory for gnome-screenshot (FEDORA-2021-303f6623fa)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

made.com Cross Site Scripting vulnerability OBB-1958822

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| made.com ---|--- Open Bug Bounty...

All Vulnerabilities for udcntt.ubdt.gov.vn Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| udcntt.ubdt.gov.vn ---|--- Open Bug...

Server side request forgery (ssrf)

Rendertron versions prior to 3.0.0 are are susceptible to a Server-Side Request Forgery SSRF attack. An attacker can use a specially crafted webpage to force a rendertron headless chrome process to render internal sites it has access to, and display it as a screenshot. Suggested mitigations are t...

qub.ac.uk Cross Site Scripting vulnerability OBB-1917576

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| qub.ac.uk ---|--- Open Bug Bounty...

Security update for firejail (important)

openSUSE Security Update: Security update for firejail Announcement ID: openSUSE-SU-2021:0271-1 Rating: important References: 1181990 Cross-References: CVE-2020-17367 CVE-2020-17368 CVE-2021-26910 CVSS scores: CVE-2020-17367 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-17368 NV...

ndtv.com Cross Site Scripting vulnerability OBB-1851049

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| ndtv.com ---|--- Open Bug Bounty...

CVE-2020-4996

IBM Security Identity Governance and Intelligence 5.2.6 could allow a local user to obtain sensitive information via the capturing of screenshots of authentication credentials. IBM X-Force ID: 192913...

PyBitmessage Security Vulnerability

PyBitmessage is an open source P2P communication protocol. It is used to send encrypted messages to other people or many subscribers. A security vulnerability exists in PyBitmessage version 0.6.3.2, which stems from a vulnerability that allows an attacker to write screenshots to potentially...

picclick.co.uk Cross Site Scripting vulnerability OBB-1815751

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| picclick.co.uk ---|--- Open Bug Bounty...

All Vulnerabilities for etaonline.me Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| etaonline.me ---|--- Open Bug Bounty...

All Vulnerabilities for legiit.com Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| legiit.com ---|--- Open Bug Bounty...

Hezbollah-Linked Lebanese Cedar APT Infiltrates Hundreds of Servers

Advanced persistent threat APT group Lebanese Cedar has compromised at least 250 public-facing servers since early 2020, researchers said, with its latest malware. The group has added new features to its custom “Caterpillar” webshell and the “Explosive RAT” remote access trojan RAT, both of which...

All Vulnerabilities for goremote.im Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| goremote.im ---|--- Open Bug Bounty...

iimk.ac.in Cross Site Scripting vulnerability OBB-1747616

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...