auctions.bertolamifinearts.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1161364 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

musicalmc2.labex-arts-h2h.fr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1160097 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

miamiartscharter.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1159856 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

musicalmc2.labex-arts-h2h.fr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1159424 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Unauthorized Access Vulnerability in Website Building System of Wuhan Diffractive Arts Advertising Co.

Wuhan Diffractive Arts Advertising Co., Ltd. is a website visual design and program development provider. An unauthorized access vulnerability exists in the website development system of Wuhan Diffractive Arts Advertising Co., Ltd, which can be exploited by attackers to obtain sensitive informati...

Electronic Arts Origin Client Remote Code Injection (CVE-2019-11354)

A template injection vulnerability exists in the Electronic Arts Origin Client. The vulnerability is due to improper validation of data in the title parameter. Successful exploitation could result in command execution on the target machine in the context of the application...

Electronic Arts Origin elevation of privilege vulnerability (CNVD-2020-13143)

Electronic Arts Origin is a game management platform from Electronic Arts. The platform includes features such as electronic software distribution, digital rights management, and a social networking system. A security vulnerability exists in Electronic Arts Origin version 10.5.55.33574. The...

CVE-2019-19741

Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation, a different issue than CVE-2019-19247 and CVE-2019-19248. When Origin.exe connects to the named pipe OriginClientService, the privileged service verifies the client's...

Design/Logic Flaw

Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation, a different issue than CVE-2019-19247 and CVE-2019-19248. When Origin.exe connects to the named pipe OriginClientService, the privileged service verifies the client's...

CVE-2019-19741

Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation, a different issue than CVE-2019-19247 and CVE-2019-19248. When Origin.exe connects to the named pipe OriginClientService, the privileged service verifies the client's...

CVE-2019-19741

CVE-2019-19741 affects Electronic Arts Origin 10.5.55.33574. Local privilege escalation arises from arbitrary directory DACL manipulation via OriginClientService: Origin.exe connects to a named pipe, the privileged service validates the client’s executable (not its in-memory image), enabling DACL...

arts-outdoors.de Cross Site Scripting vulnerability

Security Researcher MrRain1996 Helped patch 900 vulnerabilities Received 4 Coordinated Disclosure badges Received 9 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting arts-outdoors.de website and its users. Following...

CVE-2013-4867

Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking...

Hardcoded credentials

Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking...

CVE-2013-4867

Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking...

CVE-2013-4867

CVE-2013-4867 affects Electronic Arts’ Karotz Smart Rabbit, version 12.07.19.00. Connected sources describe a vulnerability class called Python module hijacking occurring during the device setup, specifically related to a Python script used in Wi‑Fi setup (e.g., autorunwifi). The impact described...

Electronic Arts Origin Elevation of Privilege Vulnerability

Origin is a digital distribution platform for buying and playing video games from Electronic Arts in the United States. An elevation of privilege vulnerability exists in Electronic Arts Origin 10.5.x and earlier versions, which can be exploited by attackers to elevate privileges...

Electronic Arts Origin elevation of privilege vulnerability (CNVD-2020-04279)

Electronic Arts Origin is a game management platform from Electronic Arts. The platform includes features such as electronic software distribution, digital rights management, and a social networking system. A security vulnerability exists in Electronic Arts Origin 10.5.x and prior versions. An...

XSS Vulnerability in Cool Arts Culture Website Building System

Cool Art Culture Network Technology Co., Ltd. is a network service organization focusing on high-end website construction and brand communication. There is an XSS vulnerability in the Cool Art Culture website builder system, which can be exploited by attackers to inject arbitrary Web scripts or...

CVE-2019-19248

Electronic Arts Origin through 10.5.x allows Elevation of Privilege issue 2 of 2...