com.exactpro.sf:sailfish-frontend (>=3.2.1036, <=3.4.260), cv.igrp:igrp-core (>=1.7.2.230613, <=1.8.3.240913) +33 more potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat-tribes (>=9.0.13, <=9.0.115)

org.apache.tomcat:tomcat-tribes MAVEN version =9.0.13, =3.2.1036, =1.7.2.230613, =1.7.2.230622, =0.1.2, =9.0.13, =9.0.13, =8.0.1, =8.0.5, =8.0.5, =8.0.5, =8.0.0-m3, =8.0.16 and more Source cves: CVE-2026-29146 Source advisory: MEND:CVE-2026-29146...

cv.igrp:igrp-core (>=2.0.0.230625-alpha, <=2.0.0.240307-rc2), cv.igrp:igrp-core-war (>=2.0.0.230625-alpha, <=2.0.0.230801-beta) +22 more potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat-tribes (>=10.0.0-m1, <=10.1.52)

org.apache.tomcat:tomcat-tribes MAVEN version =10.0.0-m1, =2.0.0.230625-alpha, =2.0.0.230625-alpha, =2.8.0, =0.2.2, =1.8.0, =1.8.0, =10.0.0-m1, =10.0.0-m1, =9.0.0-m8, =9.0.0-m8, =9.0.0-m8, =9.0.0-m8, =9.0.0-m8, =9.0.0-m8, =10.1.4 and more Source cves: CVE-2026-29146 Source advisory:...

Missing Encryption of Sensitive Data

Overview Affected versions of this package are vulnerable to Missing Encryption of Sensitive Data in the EncryptInterceptor's messageReceived method. An attacker can gain unauthorized access to sensitive data by bypassing EncryptInterceptor to intercept unencrypted communications. Note: This is d...

org.apache.tomcat:tomcat-catalina-ha (11.0.20), org.apache.tomcat:tomcat-storeconfig (11.0.20) +1 more potentially affected by CVE-2026-34486 via org.apache.tomcat:tomcat-tribes (11.0.20)

org.apache.tomcat:tomcat-tribes MAVEN version 11.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-tribes and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 11.0.20 - org.apache.tomcat:tomcat-storeconfig 11.0.20 -...

io.antmedia:ant-media-server (3.0.1), org.apache.tomcat:tomcat-catalina-ha (10.1.53) +1 more potentially affected by CVE-2026-34486 via org.apache.tomcat:tomcat-tribes (10.1.53)

org.apache.tomcat:tomcat-tribes MAVEN version 10.1.53 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-tribes and may be impacted: - io.antmedia:ant-media-server 3.0.1 - org.apache.tomcat:tomcat-catalina-ha 10.1.53 -...

org.apache.tomcat:tomcat-catalina-ha (9.0.116), org.apache.tomcat:tomcat-storeconfig (9.0.116) potentially affected by CVE-2026-34486 via org.apache.tomcat:tomcat-tribes (9.0.116)

org.apache.tomcat:tomcat-tribes MAVEN version 9.0.116 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-tribes and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 9.0.116 - org.apache.tomcat:tomcat-storeconfig 9.0.116...

Use of a Broken or Risky Cryptographic Algorithm

Overview Affected versions of this package are vulnerable to Use of a Broken or Risky Cryptographic Algorithm in the EncryptInterceptor class, which defaults to CBC mode. An attacker can obtain sensitive information via padding oracle. Remediation Upgrade org.apache.tomcat:tomcat-tribes to versio...

org.apache.axis2:axis2-clustering (2.0.0), org.apache.axis2:axis2-webapp (2.0.0) +5 more potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat-tribes (>=11.0.0-m1, <=11.0.18)

org.apache.tomcat:tomcat-tribes MAVEN version =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =7.3.0-rc1, =8.0.0-rc2 - org.ow2.petals.axis2:axis2-clustering 2.0.0-petals-0 - org.ow2.petals.axis2:axis2-webapp 2.0.0-petals-0 Source cves: CVE-2026-29146 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-15989827...

org.apache.tomcat:tomcat-catalina-ha (>=10.1.50, <=10.1.52), org.apache.tomcat:tomcat-storeconfig (>=10.1.50, <=10.1.52) +11 more potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat-tribes (>=10.1.50, <=10.1.52)

org.apache.tomcat:tomcat-tribes MAVEN version =10.1.50, =10.1.50, =10.1.50, =10.1.52 - org.apache.tomee.bom:tomee-webprofile 10.1.4 - org.apache.tomee.maven:tomee-embedded-maven-plugin 10.1.4 - org.apache.tomee:arquillian-tomee-config-tests 10.1.4 - org.apache.tomee:arquillian-tomee-embedded 10.1...

com.exactpro.sf:sailfish-frontend (>=3.2.1036, <=3.4.260), cv.igrp:igrp-core (>=1.7.2.230613, <=1.8.3.240913) +33 more potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat-tribes (>=9.0.13, <=9.0.115)

org.apache.tomcat:tomcat-tribes MAVEN version =9.0.13, =3.2.1036, =1.7.2.230613, =1.7.2.230622, =0.1.2, =9.0.13, =9.0.13, =8.0.1, =8.0.5, =8.0.5, =8.0.5, =8.0.0-m3, =8.0.16 and more Source cves: CVE-2026-29146 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-15989827...

EUVD-2014-9721

Malware in sbrugna...

tribes-store.it Cross Site Scripting vulnerability OBB-2380488

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Our journey to API security at Raiffeisen Bank International

This article was written by Peter Gerdenitsch, Group CISO at Raiffeisen Bank International, and is based on a presentation given during Imvision's Executive Education Program, a series of events focused on how enterprises are taking charge of the API security lifecycle. Launching the "Security in...

CVE-2014-9917

CVE-2014-9917 affects Bilboplanet 2.0. The issue is a stored XSS vulnerability triggered when adding a tag via the URL parameter in user/?page=tribes tags. The root cause is unsanitized input in tag handling, allowing injected script to be stored and later rendered to other users. Impact is descr...

CVE-2014-9917: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Bilboplanet 2.0. There is a stored XSS vulnerability when adding a tag via the user/?page=tribes tags parameter...

PT-2019-7155

Name of the Vulnerable Software and Affected Versions Bilboplanet version 2.0 Description A stored XSS issue was found when adding a tag via the "user/?page=tribes" API endpoint, specifically through the tags parameter. Recommendations For Bilboplanet version 2.0, as a temporary workaround,...

Celtic Tribes - Building MMOG - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Celtic Tribes - Building MMOG published at the 'play' market has multiple vulnerabilities...

Bilboplanet 2.0 - Multiple Cross-Site Scripting Vulnerabilities

Bilboplanet 2.0 - Multiple Cross-Site Scripting Vulnerabilities Exploit Title: Multiple XSS vulnerabilities in Bilboplanet application Date: 10/15/13 Exploit Author:Vivek N http://nvivek.weebly.com/ Vendor Homepage: http://www.bilboplanet.com/ Software Link:...

Bilboplanet 2.0 - Multiple Cross-Site Scripting Vulnerabilities

Exploit Title: Multiple XSS vulnerabilities in Bilboplanet application Date: 10/15/13 Exploit Author:Vivek N http://nvivek.weebly.com/ Vendor Homepage: http://www.bilboplanet.com/ Software Link: www.bilboplanet.com/index.php/downloads/?lang=en Version: 2.0 Tested on: Windows CVE : 1. Stored XSS...

StarSiege Tribes Server Denial of Service Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/8184/info StarSiege Tribes Game Server has been reported prone to a remotely triggered denial of service vulnerability. The issue presents itself when the affected server receives and processes a malformed UDP datagram...