5138 matches found
GHSA-V7VF-F5Q6-M899 .NET Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2024-43498 | .NET Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 9.0. This advisory also provides guidance on what developers can do to update their applicatio...
Exploit for CVE-2024-9926
wordpress-jetpack-broken-access-control-vulnerable-application...
MagnusBilling 7.x Command Injection
============================================================================================================================================= | Title : MagnusBilling 7.x Code Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.2 64 bit...
Server-Side Request Forgery (SSRF)
@lobehub/chat is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to inadequate redirect handling in src/app/api/proxy/route.ts, allowing attackers to bypass protections by providing a malicious URL that redirects to internal resources, such as a private network or loopbac...
Redlink SDK 安全漏洞
Redlink SDK is an open source library from Vercom S.A.. A security vulnerability exists in Redlink SDK version 1.13 and earlier, which originates from a vulnerability that allows local code to inject and manipulate the view of a vulnerable application under certain circumstances...
iStyle @cosme 安全漏洞
iStyle @cosme is a comprehensive cosmetics and beauty website from iStyle Japan. A security vulnerability exists in iStyle @cosme that stems from improper authorization in the custom URL scheme issue handler, which allows an attacker to direct users to arbitrary websites via a vulnerable...
kuttendreier.de Cross Site Scripting vulnerability OBB-3952624
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-37135
DM5500 5.16.0.0, contains an information disclosure vulnerability. A local attacker with high privileges could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable applicatio...
CVE-2024-37135
DM5500 5.16.0.0, contains an information disclosure vulnerability. A local attacker with high privileges could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable applicatio...
RubyGems: Host Header Attac
The application was vulnerable to a Host Header Injection vulnerability. The Host header was manipulated to redirect users to arbitrary domains or potentially poison web caches...
pucp.edu.pe Cross Site Scripting vulnerability OBB-3950483
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-41705
A stored XSS issue was discovered in Archer Platform 6.8 before 2024.06. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the...
CVE-2024-41706
CVE-2024-41706 describes a stored XSS flaw in Archer Platform versions prior to 2024.06. A remote authenticated Archer user could store malicious HTML/JavaScript in a trusted application data store, which is then executed by victim users’ browsers in the vulnerable app context. Public details spe...
platowebdesign.com Cross Site Scripting vulnerability OBB-3946901
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
emcarneviva.pt Cross Site Scripting vulnerability OBB-3943852
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
aytomatallanadetorio.es Cross Site Scripting vulnerability OBB-3941795
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
jcga.org.hk Cross Site Scripting vulnerability OBB-3936739
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
hennweb.de Cross Site Scripting vulnerability OBB-3933997
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
jjbyrne.ie Cross Site Scripting vulnerability OBB-3933313
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
doctor2018.jumedicine.com Cross Site Scripting vulnerability OBB-3931891
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...