17117 matches found
monumenta.ch Cross Site Scripting vulnerability OBB-3759917
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PYSEC-2023-229
ArchiveBox is an open source self-hosted web archiving system. Any users who are using the wget extractor and view the content it outputs. The impact is potentially severe if you are logged in to the ArchiveBox admin site in the same browser session and view an archived malicious page designed to...
CVE-2023-45815
The CVE-2023-45815 entry concerns ArchiveBox, an open source self-hosted web archiving system. The provided documents describe a vulnerability tied to the wget extractor: when a logged-in admin views archived pages, malicious JavaScript served from the same host can execute in the admin session, ...
estply.com Cross Site Scripting vulnerability OBB-3755475
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
esquires.ua Cross Site Scripting vulnerability OBB-3755462
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ville.plaisance.qc.ca Cross Site Scripting vulnerability OBB-3754996
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
What is SSL/TLS ?
In the intricate tapestry of the digital world, threads of information interweave, forming connections, enabling interactions, and crafting narratives. Amidst this, a silent protector—SSL/TLS—ensures that the stories told are safeguarded, secure, and sincere. This comprehensive guide unravels the...
contract-lab.it Cross Site Scripting vulnerability OBB-3754378
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Home Assistant Data Falsification Issue Vulnerability
Home Assistant is an open source home automation management system. The system is primarily used to control home automation devices. A security vulnerability exists in Home assistant versions prior to 2023.9.0, which stems from Home assistant not setting the HTTP security header. An attacker can...
PrestaShop Code Issue Vulnerability
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts, and product image scaling. A security vulnerability exists in the PrestaShop KnowBand supercheckout, which originates in the supercheckout modul...
centralparkbcn.com Cross Site Scripting vulnerability OBB-3753981
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ballsystemgroup.it Cross Site Scripting vulnerability OBB-3753015
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-42627
CVE-2023-42627 is a set of stored XSS vulnerabilities in the Liferay Commerce module affecting Portal 7.3.5–7.4.3.91 and Liferay DXP 7.3 (update 33 and earlier) and 7.4 (before update 92). The flaws allow remote attackers to inject arbitrary script/HTML via crafted payloads in multiple shipping/b...
shawwoods.ca Cross Site Scripting vulnerability OBB-3752037
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-4820
CVE-2023-4820 affects the PowerPress Podcasting plugin for WordPress (Blubrry) prior to version 11.0.12. The issue is that the plugin does not sanitize/escape the media URL field in posts, enabling stored cross-site scripting when a user with as little as contributor privileges posts content. The...
golang: net/http: insufficient sanitization of Host header
A flaw was found in Golang, where it is vulnerable to HTTP header injection caused by improper content validation of the Host header by the HTTP/1 client. A remote attacker can inject arbitrary HTTP headers by persuading a victim to visit a specially crafted Web page. This flaw allows the attacke...
Nextcloud: HTML injection in search UI when selecting a circle with HTML in the display name
An HTML injection vulnerability was discovered in the search user interface of a cloud application. When selecting a circle with HTML in the display name, this could allow redirection to malicious websites or other adverse impacts such as data theft, phishing, or malware distribution...
Shopify: IDOR on GraphQL queries BillingDocumentDownload and BillDetails
A vulnerability allowed unauthorized access to billing invoice information for other merchants...
bootstrap: XSS in the tooltip data-viewport attribute
A flaw was found in Bootstrap, where it is vulnerable to Cross-site scripting, caused by improper validation of user-supplied input by the tooltip data-viewport attribute. This flaw allows a remote attacker to execute a script in a victim's Web browser within the security context of the hosting W...
