14612 matches found
ctgrentacar.com Cross Site Scripting vulnerability OBB-1280764
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
rent-a-cars.cz Cross Site Scripting vulnerability OBB-1280174
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
a-cert.co.kr Cross Site Scripting vulnerability OBB-1279068
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20200826)
Security Fixes : - Mozilla: Attacker-induced prompt for extension installation CVE-2020-15664 - Mozilla: Use-After-Free when aborting an operation CVE-2020-15669 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid139893;...
a-ludi.com Cross Site Scripting vulnerability OBB-1275552
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Iran-Linked 'Newbie' Hackers Spread Dharma Ransomware Via RDP Ports
A group of ‘script kiddies’ tied to Iran are targeting companies worldwide with internet-facing Remote Desktop Protocol RDP ports and weak credentials in order to infect them with Dharma ransomware. The Dharma malware also known as Crysis has been distributed as a ransomware-as-a-service RaaS mod...
a-cert.co.kr Cross Site Scripting vulnerability OBB-1272240
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
a-real.at Cross Site Scripting vulnerability OBB-1272177
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
cleanlab.com.ar Cross Site Scripting vulnerability OBB-1270475
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
im-a-puzzle.com Cross Site Scripting vulnerability OBB-1269382
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
WordPress NAB Transact WooCommerce 2.1.0 Payment Bypass Vulnerability
Exploit for php platform in category web applications Title: Payment bypass Product: WordPress NAB Transact WooCommerce Plugin Vendor Homepage: https://woocommerce.com/products/nab-transact-direct-post/ Vulnerable Version: 2.1.0 Fixed Version: 2.1.2 CVE Number: CVE-2020-11497 Author: Jack Misiura...
CVE-2020-16241
Philips SureSigns VS4, A.07.107 and prior does not restrict or incorrectly restricts access to a resource from an unauthorized actor...
CVE-2020-16237
Philips SureSigns VS4, A.07.107 and prior receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly...
Former Uber CSO Charged With Paying ‘Hush Money’ in 2016 Breach Cover-Up
A former Uber security executive has been charged for his role in the cover-up of a massive 2016 data breach, in which attackers accessed the company’s Amazon Web Services accounts and stole data associated with 57 million passengers and drivers. The U.S. State Attorney for the Northern District ...
CVE-2020-16237
CVE-2020-16237 affects Philips SureSigns VS4, specifically versions A.07.107 and earlier. The vulnerability stems from improper input validation where the device may receive data without ensuring it has the required properties, leading to unsafe processing. The authoritative source (ICS-CISA advi...
Philips SureSigns VS4 Input Validation Error Vulnerability
The Philips SureSigns VS4 is a vital signs monitor used to monitor physiological parameters in patients. An input validation error vulnerability exists in Philips SureSigns VS4 A.07.107 and earlier versions, which arises from the product not validating or failing to properly validate that inputs...
Philips SureSigns VS4 License Issue Vulnerability
The Philips SureSigns VS4 is a vital signs monitor used to monitor physiological parameters in patients. An authorization issue vulnerability exists in Philips SureSigns VS4 A.07.107 and earlier versions, which stems from the product's failure to properly validate a user's claimed identity, no...
The vulnerability of Visual Studio Code’s source editor lies in its error handling after a project is opened, allowing an attacker to execute arbitrary code.
The vulnerability of Visual Studio Code’s source editor is related to a error in variable handling after a project is opened. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
a-source.nl Cross Site Scripting vulnerability OBB-1263687
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...