43 matches found
smile-happy.co Cross Site Scripting vulnerability OBB-2756219
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
smile-booker.com Cross Site Scripting vulnerability OBB-2637353
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
andersonsmile.com Improper Access Control vulnerability OBB-2424913
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cb-smile-select.net Cross Site Scripting vulnerability OBB-1329485
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
e-smile-shop.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1134693 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting e-smile-shop.com website...
Google Chrome Blink Resource Management Error Vulnerability (CNVD-2019-44525)
Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. A resource management error vulnerability exists in the thirdparty/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h file for...
Fedora Update for jackson-jaxrs-providers FEDORA-2019-df57551f6d
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 29 Update: jackson-jaxrs-providers-2.9.8-1.fc29
This is a multi-module project that contains Jackson-based JAX-RS providers for following data formats: JSON, Smile binary JSON, XML, CBOR another kind of binary JSON, YAML...
SQL Injection Vulnerability in Frog Smile Online Business Management Software of Shenzhen Kewe Technology Co.
Frog Smile Online Business Management Software is an online management software based on cloud service model and B/S architecture for all kinds of franchised industries on the Internet platform. Shenzhen Pulse Technology Co., Ltd. Pulse - frog smile online business management software SQL injecti...
smile-store.de XSS vulnerability
Open Bug Bounty ID: OBB-591299 Description| Value ---|--- Affected Website:| smile-store.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
smile-education.co.uk XSS vulnerability
Vulnerable URL: http://www.smile-education.co.uk/index.php?pageid=jobs=test-job-5=13'"55= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9395196 VIP website status:| No Coordinated...
smilecreations.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-292857 Description| Value ---|--- Affected Website:| smilecreations.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Time to Smile!:) - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Time to Smile!: published at the 'play' market has multiple vulnerabilities...
Mail.ru: e.mail.ru stored XSS in agent via sticker (smile)
Привет : смотрим скриншот : XSS в сообщениях агента с помощью стикера смайла. Отправка меседжа со стикером и XSS выглядит так: POST https://jim45.mail.ru/message?session=48280&r=18426&sdc=1 HTTP/1.1 Accept: / Content-Type: application/x-www-form-urlencoded X-Requested-With: XMLHttpRequest Referer...
CVE-2014-3697
The CVE-2014-3697 issue affects Pidgin for Windows, where the untar_block function in win32/untar.c allows absolute path traversal via a tar archive’s drive name in a smiley theme. This enables remote attackers to write files to arbitrary locations on the victim system. Public references indicate...
CVE-2009-4738
Unspecified vulnerability in JustSystems Corporation ATOK 2006 through 2009 and ATOK flat-rate service, and Just Smile 4 with the ATOK Smile module, allows physically proximate users to bypass the screen lock and execute commands with system privileges via unknown vectors related to "launching...
Design/Logic Flaw
Unspecified vulnerability in JustSystems Corporation ATOK 2006 through 2009 and ATOK flat-rate service, and Just Smile 4 with the ATOK Smile module, allows physically proximate users to bypass the screen lock and execute commands with system privileges via unknown vectors related to "launching...
CVE-2009-4738: Undefined Security Weakness
Unspecified vulnerability in JustSystems Corporation ATOK 2006 through 2009 and ATOK flat-rate service, and Just Smile 4 with the ATOK Smile module, allows physically proximate users to bypass the screen lock and execute commands with system privileges via unknown vectors related to "launching...
Facebook Life Smile SQL Injection
Title: ====== Facebook Life Smile - SQL Injection Vulnerability Date: ===== 2012-02-14 References: =========== http://www.Ninja-Sec.com Introduction: ============= The application is currently included and viewable by all facebook users. The service is an external 3rd party application sponsored ...
JVN#57040664 ATOK screen lock bypass vulnerability
ATOK from JustSystems Corporation is a software for Japanese Kana-Kanji conversion. ATOK contains an issue with the restriction of launching external applications, which may lead to a screen lock bypass vulnerability. Impact An attacker could execute arbitrary code or program with the privileges ...