216 matches found
CVE-2018-14648
It was found that a specially crafted search query could lead to excessive CPU consumption in the dosearch function. An unauthenticated attacker could use this flaw to provoke a denial of service...
Description of the security update for SharePoint Server 2013: July 10, 2018
Description of the security update for SharePoint Server 2013: July 10, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
mauriziocarini.com XSS vulnerability
Open Bug Bounty ID: OBB-586851 Description| Value ---|--- Affected Website:| mauriziocarini.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)
It was discovered that the LDAP component of OpenJDK failed to properly encode special characters in user names when adding them to an LDAP search query. A remote attacker could possibly use this flaw to manipulate LDAP queries performed by the LdapLoginModule class...
businessforsale.com.au XSS vulnerability
Open Bug Bounty ID: OBB-563300 Description| Value ---|--- Affected Website:| businessforsale.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Important: java-1.8.0-openjdk
Issue Overview: SingleEntryRegistry incorrect setup of deserialization filter JMX, 8186998 It was discovered that the JMX component of OpenJDK failed to properly set the deserialization filter for the SingleEntryRegistry in certain cases. A remote attacker could possibly use this flaw to bypass...
the-outpost.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-553529 Description| Value ---|--- Affected Website:| the-outpost.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-5977
SQL Injection exists in Affiligator Affiliate Webshop Management System 2.1.0 via a search/?q=&pricetype=range&price= request...
sieberz.sk XSS vulnerability
Open Bug Bounty ID: OBB-539425 Description| Value ---|--- Affected Website:| sieberz.sk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
campingcard.nl XSS vulnerability
Open Bug Bounty ID: OBB-529127 Description| Value ---|--- Affected Website:| campingcard.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
EulerOS 2.0 SP1 : openldap (EulerOS-SA-2017-1201)
According to the version of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A double-free flaw was found in the way OpenLDAP's slapd server using the MDB backend handled LDAP searches. A remote attacker with access to...
EulerOS 2.0 SP2 : openldap (EulerOS-SA-2017-1202)
According to the version of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A double-free flaw was found in the way OpenLDAP's slapd server using the MDB backend handled LDAP searches. A remote attacker with access to...
openldap security update
CentOS Errata and Security Advisory CESA-2017:1852 An update for openldap is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Rockstar Games: Reflected XSS via Double Encoding
The researcher found a Reflected XSS vulnerability in the search query on support.rockstargames.com. This exploit worked by using double-encoding to bypass our filters. With the researcher's help we were able to resolve this vulnerability...
Discovery of assets in Active Directory
Many security teams work in a world that they can't fully see, let alone control. It can be difficult to know how to make meaningful progress in your vulnerability management program when simply maintaining visibility can be a struggle. One way to get some leverage is to make wise use of asset...
legalweek.com XSS vulnerability
Vulnerable URL: http://www.legalweek.com/search?query='+confirm/OPENBUGBOUNTY/+'"'--!...
funidelia.cz XSS vulnerability
Open Bug Bounty ID: OBB-224353 Description| Value ---|--- Affected Website:| funidelia.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Algolia: Reflected XSS
XSS triggered by specific search query that needed to be inserted manually into the impacted element. The issue was detected as part of ongoing penetration test and despite this report being later than the initial disclosure, bounty has been awarded. Thanks @Algolia , @adams for Fixing this Bug...