CVE-2023-33524

Advent/SSC Inc. Tamale RMS 23.1 is vulnerable to Directory Traversal. If one traverses to the affected URL, one enumerates Contact information on the host which contains usernames, e-mail addresses, and other internal information stored within the web app...

MAL-2023-495 Malicious code in hd_online_player_final_fantasy_vii_advent_children_co__7i1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e037ab44e25a189105adf4a37307ae03772650eada1303cf4efb1fbc0f26faf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

advent-advisory.com Cross Site Scripting vulnerability OBB-2852459

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Code Security Advent Calendar 2021

We are happy to announce our sixth consecutive Code Security Advent Calendar! Born at RIPS in 2016, each calendar comprises 24 little code puzzles containing hidden security vulnerabilities that wait to be spotted. This is our way to share good vibes with the community while learning and having f...

Wiz goes (even more) global

The first half of 2021 has been incredible for Wiz. Fueled by an additional $250M in funding $350M total from Sequoia, Index Ventures, Insight, Salesforce, Blackstone, Advent, Greenoaks, and Aglaé Wiz has grown at a blistering pace, going from 25 employees at the start of the year to 120 today...

Java Security Advent Calendar 2019

Open Advent Calendar 2019 24 Java Security Challenges Every day in December, until 24th, we will release a new Java code snippet that poses a critical security bug - similar to last years calendars. Each hidden bug can be in form of a classic vulnerability type, a faulty security patch that can b...

Wide-Ranging German Doxxing Incident Hits Hundreds of Politicians

Hundreds of German politicians, including Chancellor Angela Merkel, have been doxxed in a puzzling incident, with their private information and political documents dumped online. At least one local reporter is claiming the information is explosive. According to a report from German public...

PHP Security Advent Calendar 2017

The end of the year is coming closer and the cheery advent time begins. We are looking back at a spectacular year and it is time to thank and give back to the great PHP, infosec, and RIPS community. Thank you for developing, auditing, and securing your PHP applications with us in 2017! Similar to...

Advent Story Calendar Demo - BSD license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Advent Story Calendar Demo published at the 'play' market has multiple vulnerabilities...

Citrix Command Center Arbitrary Code Execution Vulnerability

Citrix Command Center provides centralized management of Branch Repeater products deployed across the network. Citrix Command Center fails to properly restrict access to Advent Java Management Extensions JMX, which allows remote attackers to exploit a vulnerability to execute arbitrary code via...

Citrix Command Center authentication bypass

Advent JMX is accessible...

Citrx Command Center Advent JMX Servlet Accessible

------------------------------------------------------------------------ Advent JMX Servlet of Citrx Command Center is accessible to unauthenticated users ------------------------------------------------------------------------ Han Sahin, August 2014...

Unfixed XSS vulnerability at www.adventbirmingham.org

Security researcher cueballr, has submitted on 17/04/2008 a cross-site-scripting XSS vulnerability affecting www.adventbirmingham.org, which at the time of submission ranked 1632119 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/04/2008. It...