CVE-2021-27167

An issue was discovered on FiberHome HG6245D devices through RP2613. There is a password of four hexadecimal characters for the admin account. These characters are generated in init3bbpassword in libciadaptationlayer.so...

bb-q.ru Cross Site Scripting vulnerability OBB-1457993

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

bb-lugano.ch Cross Site Scripting vulnerability OBB-1366441

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

bb-lugano.ch Cross Site Scripting vulnerability OBB-1359616

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Malicious Package in bb-builder

All versions of bb-builder contained malicious code. The package ran an executable targeting Windows and uploaded information to a remote server. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

GHSA-VM6V-W6Q2-MRRQ Malicious Package in bb-builder

All versions of bb-builder contained malicious code. The package ran an executable targeting Windows and uploaded information to a remote server. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

PT-2020-21521

Name of the Vulnerable Software and Affected Versions bb-builder versions affected versions not specified Description The issue concerns malicious code embedded in the bb-builder package, which executes an executable targeting Windows and uploads information to a remote server. Any computer with...

bb-immo.at Cross Site Scripting vulnerability OBB-1272733

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

bb-shop.hu Cross Site Scripting vulnerability OBB-1232687

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

bb-mix.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1091415 Security Researcher Zodx Helped patch 35 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting bb-mix.com website and its users. Following coordinated and...

Design/Logic Flaw

bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter...

PT-2020-7094

Name of the Vulnerable Software and Affected Versions bbPress versions 1.0.0 through 1.0.2 Description The issue concerns a cross-site scripting XSS flaw in the /bb-login.php URL, specifically via the re parameter. This allows for potential malicious script injection. No information is provided...

CVE-2011-1150: Improper Neutralization of Input During Web Page Generation

bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter...

CVE-2018-13257

The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service CAS service ticket validation, enabling a phishing attack from the CAS server login page...

Design/Logic Flaw

The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service CAS service ticket validation, enabling a phishing attack from the CAS server login page...

CVE-2018-13257: URL Redirection to Untrusted Site

The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service CAS service ticket validation, enabling a phishing attack from the CAS server login page...

PT-2019-8928

Name of the Vulnerable Software and Affected Versions Blackboard Learn version 2018-07-02 Description The issue concerns HTTP host header spoofing during Central Authentication Service CAS service ticket validation in the bb-auth-provider-cas authentication module. This allows for a phishing atta...

Design/Logic Flaw

phpbb 3.0.x-3.0.6 has an XSS vulnerability via the flash BB tag...

CVE-2011-0544

phpbb 3.0.x-3.0.6 has an XSS vulnerability via the flash BB tag...

CVE-2011-0544

CVE-2011-0544 affects phpBB 3.0.x–3.0.6 with an XSS vulnerability via the [flash] BB tag . The available documents consistently identify this issue in phpBB 3.0.x–3.0.6, but provide no explicit root-cause details, affected components beyond the flash tag, exploit status, or remediation (patch/ver...