120 matches found
CVE-2023-24256
An issue in the com.nextev.datastatistic component of NIO EC6 Aspen before v3.3.0 allows attackers to escalate privileges via path traversal...
CVE-2023-24256
An issue in the com.nextev.datastatistic component of NIO EC6 Aspen before v3.3.0 allows attackers to escalate privileges via path traversal...
Path traversal
An issue in the com.nextev.datastatistic component of NIO EC6 Aspen before v3.3.0 allows attackers to escalate privileges via path traversal...
CVE-2023-24256
An issue in the com.nextev.datastatistic component of NIO EC6 Aspen before v3.3.0 allows attackers to escalate privileges via path traversal...
PT-2023-19501 · Nio · Nio Ec6 Aspen
Name of the Vulnerable Software and Affected Versions: NIO EC6 Aspen versions prior to 3.3.0 Description: The issue in the com.nextev.datastatistic component allows attackers to escalate privileges via path traversal. Recommendations: For versions prior to 3.3.0, update to version 3.3.0 or later ...
CVE-2023-24256
An issue in the com.nextev.datastatistic component of NIO EC6 Aspen before v3.3.0 allows attackers to escalate privileges via path traversal...
CVE-2023-24256
CVE-2023-24256 affects NIO EC6 Aspen all versions before 3.3.0, due to a path traversal flaw in the com.nextev.datastatistic component that enables privilege escalation. The issue is confirmed across multiple feeds (NVD/Red Hat/CVE lists) with a consistent remediation: upgrade to version 3.3.0 or...
berthoud.catalog.aspencat.info Cross Site Scripting vulnerability OBB-2825079
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
aspenparks.com.au Cross Site Scripting vulnerability OBB-2711457
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
aspen-tech.com Cross Site Scripting vulnerability OBB-2487770
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
A Cybersecurity Policy Agenda
The Aspen Institutes Aspen Cybersecurity Group -- Im a member -- has released its cybersecurity policy agenda for the next four years. The next administration and Congress cannot simultaneously address the wide array of cybersecurity risks confronting modern society. Policymakers in the White...
aspenfinancialgroup.proiwebsites.com Cross Site Scripting vulnerability OBB-1306816
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Becoming a Comms and Analyst Relations Leader, Rita Aspen - Head, Communications & Analyst Relations, APJ
My parents were first-generation immigrants from India. They worked hard, made Singapore their home and took all and any challenges head on. They have always lived by the simple philosophy, 'to be the change'. It's a philosophy that I try to live too, and in many ways it's what attracted me to...
aspenrecreation.com XSS vulnerability
Open Bug Bounty ID: OBB-672035 Description| Value ---|--- Affected Website:| aspenrecreation.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Microsoft Says Russia Tried to Hack Three 2018 Midterm Election Candidates
Microsoft said it detected and helped the US government to block Russian hacking attempts against at least three congressional candidates this year, a Microsoft executive revealed speaking at the Aspen Security Forum today. Although the company refused to name the targets but said, the three...
aspen-ruggerfest.com XSS vulnerability
Open Bug Bounty ID: OBB-627177 Description| Value ---|--- Affected Website:| aspen-ruggerfest.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
onthesnow.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-604664 Description| Value ---|--- Affected Website:| onthesnow.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
onthesnow.com.br XSS vulnerability
Open Bug Bounty ID: OBB-604666 Description| Value ---|--- Affected Website:| onthesnow.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
onthesnow.co.nz XSS vulnerability
Open Bug Bounty ID: OBB-604663 Description| Value ---|--- Affected Website:| onthesnow.co.nz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
onthesnow.com XSS vulnerability
Open Bug Bounty ID: OBB-604661 Description| Value ---|--- Affected Website:| onthesnow.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...