2262 matches found
at-cz.eu XSS vulnerability
Open Bug Bounty ID: OBB-672138 Description| Value ---|--- Affected Website:| at-cz.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
AT Command Hitch Leaves Android Phones Open to Attack
Attackers can use AT commands to launch several malicious functions on an array of Android devices, including extracting data, rewriting the smartphone firmware and bypassing Android security measures. All they need, according to researchers who developed a proof-of-concept PoC attack, is the...
AT&T Faces $224M Legal Challenge Over SIM-Jacking Rings
Cryptocurrency investor and Dogecoin founder Michael Terpin has filed a $223.8 million lawsuit against AT&T, alleging the mobile phone giant turned a blind eye to SIM fraud. Terpin alleges that more than 3 million cryptocurrency tokens worth $24 million were lifted from his digital wallet at an...
CVE-2018-10622
The CVE-2018-10622 issue affects Medtronic MyCareLink Patient Monitor models 24950/24952, where per-product credentials are stored in a recoverable format. This allows an attacker with physical access to obtain credentials and use them for network authentication and encryption of data at rest. Th...
PT-2018-1432
Name of the Vulnerable Software and Affected Versions Medtronic MyCareLink Patient Monitor versions affected versions not specified Description A vulnerability was discovered in Medtronic MyCareLink Patient Monitor, where per-product credentials are stored in a recoverable format. This allows an...
New Spectre-Level Flaw Targets Return Stack Buffer
Researchers have discovered yet another speculative execution side-channel flaw enabling attackers to access sensitive data at the CPU level. The new Spectre-class exploit, dubbed SpectreRSB, was detailed by researchers from the University of California at Riverside in a research paper on Friday...
PT-2019-4775
Name of the Vulnerable Software and Affected Versions Python versions 2.7.16 and earlier Python versions 3.x through 3.5.7 Python versions 3.6.x through 3.6.9 Python versions 3.7.x through 3.7.4 Description The issue is related to the email module in Python, which incorrectly parses email address...
at-eat.com XSS vulnerability
Open Bug Bounty ID: OBB-648696 Description| Value ---|--- Affected Website:| at-eat.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
eduhi.at XSS vulnerability
Open Bug Bounty ID: OBB-648679 Description| Value ---|--- Affected Website:| eduhi.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
anlagegold24.at XSS vulnerability
Open Bug Bounty ID: OBB-646179 Description| Value ---|--- Affected Website:| anlagegold24.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
AT&T Bizcircle Cross Site Scripting
Document Title: =============== AT&T Bizcircle - Persistent Profile Cross Site Scripting Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2108 AT&T Reference ID: 1502971499862 Vulnerability Magazine:...
AT&T Bizcircle - Persistent Profile Cross Site Vulnerability
Document Title: =============== AT&T Bizcircle - Persistent Profile Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2108 AT&T Reference ID: 1502971499862 Vulnerability Magazine:...
AT&T Bizcircle - Persistent Profile Cross Site Vulnerability
Document Title: =============== AT&T Bizcircle - Persistent Profile Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2108 AT&T Reference ID: 1502971499862 Vulnerability Magazine:...
jira.feuerwehr.gv.at XSS vulnerability
Open Bug Bounty ID: OBB-638366 Description| Value ---|--- Affected Website:| jira.feuerwehr.gv.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Supreme Court: Police Need Warrant for Mobile Location Data
The U.S. Supreme Court today ruled that the government needs to obtain a court-ordered warrant to gather location data on mobile device users. The decision is a major development for privacy rights, but experts say it may have limited bearing on the selling of real-time customer location data by...
eu2014.at XSS vulnerability
Open Bug Bounty ID: OBB-627334 Description| Value ---|--- Affected Website:| eu2014.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
za1.at XSS vulnerability
Open Bug Bounty ID: OBB-627331 Description| Value ---|--- Affected Website:| za1.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2017-16021
uri-js is a module that tries to fully implement RFC 3986. One of these features is validating whether or not a supplied URL is valid or not. To do this, uri-js uses a regular expression, This regular expression is vulnerable to redos. This causes the program to hang and the CPU to idle at 100%...
babygalerie24.at XSS vulnerability
Open Bug Bounty ID: OBB-626768 Description| Value ---|--- Affected Website:| babygalerie24.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
