PT-2019-6611

Name of the Vulnerable Software and Affected Versions phpBB versions 3.0.x through 3.0.6 Description The issue allows for an XSS attack via the flash BB tag. Recommendations For versions 3.0.x through 3.0.6, update to a version that fixes this issue. At the moment, there is no information about a...

CVE-2011-0544: Improper Neutralization of Input During Web Page Generation

phpbb 3.0.x-3.0.6 has an XSS vulnerability via the flash BB tag...

Malicious Package

Overview All versions of bb-builder contained malicious code. The package ran an executable targeting Windows and uploaded information to a remote server. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on...

phpBB: CSS injection via BB code tag "█████"

The input to the "█████" BBcode tag is not properly filtered. It gets converted into a CSS style attribute for a span HTML element. Quotes " are removed, so there's no way to break out of the CSS style attributed. However it is possible to arbitrarily dress the resulting span element. To illustra...

PT-2019-5719

Name of the Vulnerable Software and Affected Versions Advantech BB-ERT351 affected versions not specified Description The issue is related to the use of an insecure cryptographic algorithm for password hashing in the Advantech BB-ERT351 network router's firmware. This could allow a remote attacke...

PT-2019-5720

Name of the Vulnerable Software and Affected Versions Advantech BB-ERT351 affected versions not specified Description The issue is related to the lack of a password masking mechanism in the web interface of the Advantech BB-ERT351 network router's firmware. This could allow an attacker to reveal...

PT-2018-11120

Name of the Vulnerable Software and Affected Versions radare2 version 2.6.0 Description The issue is related to a use after free in the r anal bb free function, located in libr/anal/bb.c, which can be triggered by a crafted Java binary file. Recommendations For radare2 version 2.6.0, at the momen...

bb-cnr.com XSS vulnerability

Open Bug Bounty ID: OBB-622741 Description| Value ---|--- Affected Website:| bb-cnr.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

www15.bb.com.br XSS vulnerability

Open Bug Bounty ID: OBB-619343 Description| Value ---|--- Affected Website:| www15.bb.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bb-klostermann.de XSS vulnerability

Open Bug Bounty ID: OBB-599894 Description| Value ---|--- Affected Website:| bb-klostermann.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bb-online.com XSS vulnerability

Open Bug Bounty ID: OBB-533626 Description| Value ---|--- Affected Website:| bb-online.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bdkj-bb-cw.de XSS vulnerability

Open Bug Bounty ID: OBB-456253 Description| Value ---|--- Affected Website:| bdkj-bb-cw.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

bb-fr.com XSS vulnerability

Open Bug Bounty ID: OBB-286859 Description| Value ---|--- Affected Website:| bb-fr.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2017-18263

Name of the Vulnerable Software and Affected Versions TeamSpeak Server version 3.0.13.6 Description A potential buffer overflow issue related to BB Code handling has been identified, which allows users to crash any Windows client that clicks into a vulnerable channel of a TeamSpeak Server...

CVE-2017-8290: Improper Restriction of Operations within the Bounds of a Memory Buffer

A potential Buffer Overflow Vulnerability from a BB Code handling issue has been identified in TeamSpeak Server version 3.0.13.6 08/11/2016 09:48:33, it enables the users to Crash any WINDOWS Client that clicked into a Vulnerable Channel of a TeamSpeak Server...

Blizard BB 1.7 (privtmsg) MD5 Hash Retrieve Blind sql injection Exploit

Exploit for php platform in category web applications !/usr/bin/perl ------------------------------------------------------------------------ + Blizard BB 1.7 privtmsg MD5 Hash Retrieve blind sql injection ------------------------------------------------------------------------ Discovered by Juri...

CVE-2016-6550

The U by BB&T app 1.5.4 and earlier for iOS does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2016-6550

The CVE references a vulnerability in the U by BB&T iOS app (versions 1.5.4 and earlier). The root cause is improper validation of SSL server certificates (X.509), enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate. Affected software: ...

CVE-2016-6550: Undefined Security Weakness

The U by BB&T app 1.5.4 and earlier for iOS does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2016-6980

Name of the Vulnerable Software and Affected Versions The U by BB&T app versions 1.5.4 and earlier for iOS Description The issue is related to the improper verification of X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information v...