5246 matches found
ELECOM wireless LAN routers OS Command Injection Vulnerability
ELECOM wireless LAN routers are a family of routers from ELECOM Japan. The ELECOM wireless LAN routers are vulnerable to an operating system command injection vulnerability that stems from the presence of an operating system command injection vulnerability that could allow a network-adjacent...
High-Severity Flaws Uncovered in Bosch Thermostats and Smart Nutrunners
Multiple security vulnerabilities have been disclosed in Bosch BCC100 thermostats and Rexroth NXA015S-36V-B smart nutrunners that, if successfully exploited, could allow attackers to execute arbitrary code on affected systems. Romanian cybersecurity firm Bitdefender, which discovered the flaw in...
Issues identified on devices running Android 14 that impact restrictions set by SecureHub.
On Android 14, some admin-set UserManager restrictions may be permanently applied on reboot, preventing SecureHub from effectively un-setting those restrictions. Affected settings are in Appendix A 2. On the upgrade from Android 13 to Android 14, some admin-set UserManager restrictions may be...
b-i-buero.de Cross Site Scripting vulnerability OBB-3828875
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-8818 · Delta Electronics · Cncsoft-B
Name of the Vulnerable Software and Affected Versions: Delta Electronics CNCSoft-B versions 1.0.0.4 and prior Description: The issue is caused by a stack-based buffer overflow in the CNCSoft-B software, which may allow an attacker to execute arbitrary code. This can be exploited by remote...
b-21.com Cross Site Scripting vulnerability OBB-3818900
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
d-b-web.de Improper Access Control vulnerability OBB-3818333
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the CNCSoft-B software and DOPSoft software lies in the possibility of an operation being executed outside the buffer boundaries in memory, allowing a hacker to execute arbitrary code.
The vulnerability of CNCSoft-B and DOPSoft software lies in the execution of operations beyond the buffer limits in memory when processing DPA files. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created malicious file or a specially created...
CVE-2023-46746
CVE-2023-46746 concerns PostHog (self-hosted) where a server-side request forgery (SSRF) vulnerability could be exploited by authenticated users. The root cause is that PostHog did not verify whether a URL is local when enabling webhooks, allowing an authenticated user to forge a POST request. Th...
b-it.com Improper Access Control vulnerability OBB-3794166
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
b-townblog.com Open Redirect vulnerability OBB-3790246
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-43752
OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000GS2A-B v1.05 and earlier allows a network-adjacent authenticated user to execute an arbitrary OS command by sending a specially crafted request...
b-fit4you.at Improper Access Control vulnerability OBB-3779532
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-32594
Cross-Site Request Forgery CSRF vulnerability in Benedict B., Maciej Gryniuk Hyphenator plugin = 5.1.5 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Benedict B., Maciej Gryniuk Hyphenator plugin = 5.1.5 versions...
CVE-2023-32594
CVE-2023-32594 affects the WordPress plugin Hyphenator (versions
Security Bulletin: Vulnerability in SANNav Software used by IBM b-type SAN directors and switches.
Summary The SANnav Management Portal and Global View products are vulnerable due to a Jave SE issue. The vulnerability has been addressed and can be resolved by applying the SANnav code level listed below. Vulnerability Details CVEID: CVE-2022-21426 DESCRIPTION: An unspecified vulnerability in Ja...
b-resonant.com Cross Site Scripting vulnerability OBB-3753557
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
b-resilience.com Cross Site Scripting vulnerability OBB-3753556
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...