PT-2020-20192 · Horde · Horde Groupware Webmail Edition

Name of the Vulnerable Software and Affected Versions: Horde Groupware Webmail Edition version 5.2.22 Description: The issue allows injection of arbitrary PHP code via CSV data, leading to remote code execution. Recommendations: For Horde Groupware Webmail Edition version 5.2.22, consider disabli...

PT-2018-16309 · Samsung · Samsung Smartthings Hub

Name of the Vulnerable Software and Affected Versions: Samsung SmartThings Hub STH-ETH-250 version 0.20.17 Description: The issue arises from the insecure extraction of fields from the "shard" table in the SQLite database by the video-core process, leading to a buffer overflow on the stack. This...

PT-2018-1502 · Microsoft · Excel Viewer +2

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft Excel affected versions not specified Microsoft Excel Viewer affected versions not specified Description: The issue is related to incorrect handling of objects in memory, which can...

PT-2018-8956 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue concerns an untrusted search path vulnerability in self-extracting archive files created by IExpress, which is bundled with Microsoft Windows. This vulnerability allows ...

m.gangav.com XSS vulnerability

Vulnerable URL: http://m.gangav.com/ja/search?q=%22%3E%3Cimg%20src%3Dx%20onerror%3Dprompt%27OPENBUGBOUNTY%27%3E=movies Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

m.sinfulpantysex.com XSS vulnerability

Vulnerable URL: http://m.sinfulpantysex.com/t1/?nats=t" onmouseover=alert'OPENBUGBOUNTY'; a=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

m.newlook.com XSS vulnerability

Vulnerable URL: https://m.newlook.com/secure/furniture/helpcentrefaq.jsp?page=vulnerable=%22%3E%3C/title%3E%3Ck%20onbeforescriptexecute=%3D%22alert%60OPENBUGBOUNTY%60 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status...

lcmspubcontact.lc.ca.gov Open Redirect vulnerability

Vulnerable URL: https://lcmspubcontact.lc.ca.gov/PublicLCMS/LinkTracking.php?id=49124=229319=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

de.pornosearch.guru XSS vulnerability

Vulnerable URL: https://de.pornosearch.guru/?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline:...

how2tune.net XSS vulnerability

Vulnerable URL: http://www.how2tune.net/main.php?lang=nl" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check how2tune.net SSL...

starcolony.com XSS vulnerability

Vulnerable URL: http://starcolony.com/sc/web/game/?mail=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17445 VIP website status:| Yes Check starcolony.com SSL connection:| Grade:...

mail.teksavvy.com XSS vulnerability

Vulnerable URL: https://mail.teksavvy.com/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

blog.eduzones.com Open Redirect vulnerability

Vulnerable URL: http://blog.eduzones.com/redirect.php?url=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

services.inquirer.net XSS vulnerability

Vulnerable URL: http://services.inquirer.net/search/?q=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E=partner-pub-1605567560733750%3Asv9uao60u5g=FORID%3A10=ISO-8859-1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability...

locations-vacances-portovecchio.com XSS vulnerability

Vulnerable URL: http://www.locations-vacances-portovecchio.com//search/site/?q= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP websi...

PT-2010-3504 · Microsoft · Windows +2

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue allows remote attackers to execute arbitrary code via a media file with crafted compression data. This is related to an unspecified vulnerability in Quartz.dll for...

PT-2005-3281 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal version 0.10.11 Description: A issue in the BER dissector of Ethereal allows remote attackers to cause a denial of service, resulting in an abort or infinite loop, via unknown attack vectors. Recommendations: For Ethereal version...

PT-2005-3111 · Grandstream · Grandstream Budgetone (Bt) 100

Name of the Vulnerable Software and Affected Versions: Grandstream BudgeTone BT 100 affected versions not specified Description: The issue concerns the Grandstream BudgeTone BT 100 Voice over IP VoIP phones, which do not properly validate certain values in a NOTIFY message. This allows remote...

PT-2005-1801 · Veritas · Veritas Backup Exec

Name of the Vulnerable Software and Affected Versions: VERITAS Backup Exec versions 9.0 through 10.0 for Windows Servers VERITAS Backup Exec versions 9.0.4019 through 9.1.307 for Netware Description: The issue allows remote attackers to cause a denial of service, resulting in a Remote Agent crash...

PT-1999-1504 · Matt · Whois.Cgi

Name of the Vulnerable Software and Affected Versions: Matt's Whois program whois.cgi affected versions not specified Description: The issue allows remote attackers to execute commands via shell metacharacters in the domain entry. Recommendations: At the moment, there is no information about a...