XStream Library Insecure Deserialization (CVE-2019-10173)

An insecure serialization vulnerability exists in XStream Library. The vulnerability is due to insufficient validation of event handler type in user-supplied XML data. A remote attacker could exploit this vulnerability by sending specially crafted XML file to the affected application. Successful...

EulerOS 2.0 SP8 : libxslt (EulerOS-SA-2020-1166)

According to the version of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafte...

CVE-2020-9351

An issue was discovered in SmartClient 12.0. If an unauthenticated attacker makes a POST request to /tools/developerConsoleOperations.jsp or /isomorphic/IDACall with malformed XML data in the transaction parameter, the server replies with a verbose error showing where the application resides the...

otpusk.uz Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1099871 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

novarenoma.com.br Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1099814 Security Researcher haxmov Helped patch 543 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting novarenoma.com.br website and...

arnoldbodeschule.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1098658 Security Researcher raviakp1004 Helped patch 626 vulnerabilities Received 4 Coordinated Disclosure badges Received 5 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting arnoldbodeschule.de...

tealaneassociates.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1098159 Security Researcher geeknik Helped patch 8675 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting tealaneassociates.com...

spbsova.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1097094 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting spbsova.ru website and its...

bestfitmyanmar.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1089826 Security Researcher raviakp1004 Helped patch 796 vulnerabilities Received 4 Coordinated Disclosure badges Received 6 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting bestfitmyanmar.com websi...

decore-sistema.signodev.com.br Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1086877 Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

sys.orbiz.com.br Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1086505 Security Researcher haxmov Helped patch 708 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting sys.orbiz.com.br website and...

sdkblog.skobbler.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1084675 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

lidernekretnine.rs Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8525 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting lidernekretnine.rs website and its users. Following...

gtk-gryazi.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1078820 Security Researcher geeknik Helped patch 8908 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting gtk-gryazi.ru website and...

restaurantabsinthe.com Cross Site Scripting vulnerability

Security Researcher haxmov Helped patch 543 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting restaurantabsinthe.com website and its users. Following...

rookeshiran.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1077177 Security Researcher geeknik Helped patch 8961 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting rookeshiran.com website an...

parisfashionshops.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1075106 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

mrpopat.in Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1069687 Security Researcher Dipu1A Helped patch 998 vulnerabilities Received 5 Coordinated Disclosure badges Received 21 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting mrpopat.in website and its...

genoway.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1069660 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

wordtravels.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1066112 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...