75 matches found
PT-2024-21356 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: swftools version 0.9.2 Description: The issue is related to a segmentation violation in the function free lines at swftools/lib/modules/swfshape.c. This indicates a potential memory access error that could lead to unexpected program behavior ...
leisuregardening.co.uk Improper Access Control vulnerability OBB-3858266
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CAN-2005-2876
CVE-2005-2876 is not a reserved placeholder in connected docs; multiple advisories (Debian DSA-825-1, Debian DSA-823-1, Gentoo GLSA 200509-15, SLES9, Slackware advisory) describe a bug in util-linux related to the mount utility that could allow local users to bypass filesystem access restrictions...
customdelux.de Improper Access Control vulnerability OBB-3818246
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
crosswordclues.com Cross Site Scripting vulnerability OBB-3787109
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
awsa.org.au Improper Access Control vulnerability OBB-3781578
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
shekinahmedical.com Cross Site Scripting vulnerability OBB-3479218
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
toolkit.rescuegroups.org Cross Site Scripting vulnerability OBB-3401251
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Flarum 访问控制错误漏洞
Flarum is an open source forum system for the Flarum community. An access control error vulnerability exists in flarum mention versions prior to 1.6.3, which stems from allowing the disclosure of all posts in the forum database, including posts awaiting approval, posts in tags to which the user...
sdsz.com.cn Cross Site Scripting vulnerability OBB-3118965
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
编号已被CVE保留
No details are available at this time...
Exploit for CVE-2022-30190
Follina-MSDT-Vulnerability-CVE-2022-30190- Detection and Remed...
medicaldatascope.com Cross Site Scripting vulnerability OBB-2670939
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Exploit for CVE-2020-13457
CVE-2020-13457 CVE-2020-13457 Timeline ================ 202...
WordPress Tooltipy 5.0 Cross Site Scripting
Details ================ Software: Tooltipy tooltips for WP Version: 5.0 Homepage: https://wordpress.org/plugins/bluet-keywords-tooltip-generator/ Advisory report: https://advisories.dxw.com/advisories/xss-in-tooltipy/ CVE: Awaiting assignment CVSS: 5.8 Medium; AV:N/AC:M/Au:N/C:P/I:P/A:N...
WordPress Photo Gallery 1.3.34 / 1.3.42 Path Traversal
Details ================ Software: Photo Gallery Version: 1.3.34,1.3.42 Homepage: https://wordpress.org/plugins/photo-gallery/ Advisory report: https://security.dxw.com/advisories/path-traversal-in-photo-gallery-may-allow-admins-to-read-most-files-on-the-filesystem/ CVE: Awaiting assignment CVSS:...
alabama3.co.uk XSS vulnerability
Vulnerable URL: http://www.alabama3.co.uk/en/myaccount/login?errormsg=Please+login+and+we+will+send+you+right+along."'--!to=http://www.alabama3.co.uk/myaccount/home Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:|...
michelefranzesemoda.com XSS vulnerability
Vulnerable URL: https://www.michelefranzesemoda.com/it/search?path=a%3E%27%3E%22%3Et%3Ci%3Ep%3Cimg+src%3Dy+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...
whosdatedwho.com XSS vulnerability
Vulnerable URL: http://www.whosdatedwho.com/popular?letter=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 21408 VIP website status:| Yes Check whosdatedwho.com SSL connection:|...
sweetrice cms 0.6.7 - Multiple Vulnerabilities
No description provided by source. Vulnerability ID: HTB22669 Reference: http://www.htbridge.ch/advisory/resetadminpasswordinsweetricecms.html Product: SweetRice CMS Vendor: basic-cms.org http://www.basic-cms.org/ Vulnerable Version: 0.6.7 Vendor Notification: 21 October 2010 Vulnerability Type:...