digitallibrary.al-furqan.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1149684 Security Researcher EvilOperator Helped patch 4 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting digitallibrary.al-furqan.com website and its users. Following coordinated and responsible vulnerability disclosure...

DEBIAN-CVE-2020-11728

An issue was discovered in DAViCal Andrew's Web Libraries AWL through 0.60. Session management does not use a sufficiently hard-to-guess session key. Anyone who can guess the microsecond time and the incrementing sessionid can impersonate a session...

UBUNTU-CVE-2020-11728

An issue was discovered in DAViCal Andrew's Web Libraries AWL through 0.60. Session management does not use a sufficiently hard-to-guess session key. Anyone who can guess the microsecond time and the incrementing sessionid can impersonate a session...

UBUNTU-CVE-2020-11729

An issue was discovered in DAViCal Andrew's Web Libraries AWL through 0.60. Long-term session cookies, uses to provide long-term session continuity, are not generated securely, enabling a brute-force attack that may be successful...

al-hakim.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1143054 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting al-hakim.com website and...

Cumulative Update 41 for Microsoft Dynamics NAV 2017 (Build 30219)

Cumulative Update 41 for Microsoft Dynamics NAV 2017 Build 30219 This article applies to Microsoft Dynamics NAV 2017 for all countries and all language locales. An information disclosure vulnerability exists if Microsoft Dynamics Business Central/NAV on-premises does not correctly hide the value ...

USN-4324-1: Linux kernel vulnerabilities

Al Viro discovered that the vfs layer in the Linux kernel contained a use- after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly expose sensitive information kernel memory. CVE-2020-8428 Shijie Luo discovered that the ext4 file system...

al-ikhsan.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1135155 Security Researcher raviakp1004 Helped patch 586 vulnerabilities Received 4 Coordinated Disclosure badges Received 5 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting al-ikhsan.com website an...

al-arafahbank.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1135148 Security Researcher raviakp1004 Helped patch 793 vulnerabilities Received 4 Coordinated Disclosure badges Received 6 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting al-arafahbank.com websit...

Arbitrary file upload vulnerability in the al***.cl***.php page of the frontend of UQCMS cloud business system

UQCMS cloud business system is the program using PHP + MYSQL template using smarty template, front and back end is separated from a B2B2C e-commerce software. UQCMS cloud business system front al.cl.php page exists arbitrary file upload vulnerability. An attacker can exploit the vulnerability to...

Schneider Electric Modicon M580/M340/BMxCRA/140CRA Denial of Service Vulnerability

The Modicon M580/M340/BMxCRA/140CRA are programmable logic controllers from Schneider Electric. A denial of service vulnerability exists in the Schneider Electric Modicon M580/M340/BMxCRA/140CRA. An attacker could use this vulnerability to cause a denial of service by upgrading the firmware via t...

al-majid.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-997831 Security Researcher Dipu1A Helped patch 1027 vulnerabilities Received 6 Coordinated Disclosure badges Received 22 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting al-majid.com website and its...

Akamai y Exceda: Maximizar en conjunto el valor de clientes y socios de América Latina

Hoy, Akamai anunció un acuerdo para adquirir Exceda, nuestro socio de canal más grande de América Latina. Quiero compartir lo que esta adquisición implica para nuestros clientes y socios, y el motivo por el que me emociona enormemente el potencial que esto representa para todos nosotros. Exceda,...

Unique Monokle Android Spyware Self-Signs Certificates

A never-before-publicized mobile spy tool, a mobile surveillanceware remote access trojan RAT for Android called Monokle, has been spotted using novel techniques to exfiltrate data. According to the Lookout researchers who discovered Monokle in the wild, the malware has the ability to self-sign...

Securifi Almond Cross-Site Scripting Vulnerability

The Securifi Almond is a wireless router with a touch screen. A cross-site scripting vulnerability in the Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096 can be exploited by a remote attacker to take control of the device as the admin user, execute arbitrary code, or chan...

Securifi Almond Server-Side Request Forgery Vulnerability

The Securifi Almond is a wireless router with a touch screen. A server-side request forgery vulnerability exists in the Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096, which can be exploited by a remote attacker to trick a user into changing a user password...

Securifi Almond buffer overflow vulnerability (CNVD-2019-18743)

The Securifi Almond is a wireless router with a touch screen. A buffer overflow vulnerability exists in getCfgToHTML in Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096, which can be exploited by an attacker to cause a buffer overflow or heap overflow...

Securifi Almond Command Injection Vulnerability (CNVD-2019-18745)

The Securifi Almond is a wireless router with a touch screen. A command injection vulnerability exists in the port forwarding feature in Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096, which can be exploited by an attacker to submit a malicious payload and take control o...

CVE-2017-8330

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a UPnP functionality for devices to interface with the router and interact with the device. It seems that the "NewInMessage" SOAP parameter passed with a huge payload results in...

CVE-2017-8328

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of changing the administrative password for the web management interface. It seems that the device does not implement any cross site request forgery...