Buffer overflow

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

Buffer overflow

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

CVE-2017-8207

The CVE-2017-8207 entry describes a buffer overflow in the driver of Huawei Honor 5C/6x smartphones (pre-NEM-AL10C00B356 and pre-Berlin-L21HNC432B360). The underlying issue is lack of parameter validation in the driver, allowing a user-specified parameter sent from a malicious app with Android ro...

startup-jobs-germany.com XSS vulnerability

Open Bug Bounty ID: OBB-410617 Description| Value ---|--- Affected Website:| startup-jobs-germany.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kieferorthopaedie-orthodontie-berlin.de XSS vulnerability

Open Bug Bounty ID: OBB-355718 Description| Value ---|--- Affected Website:| kieferorthopaedie-orthodontie-berlin.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWAS...

bizware.tu-berlin.de XSS vulnerability

Open Bug Bounty ID: OBB-338347 Description| Value ---|--- Affected Website:| bizware.tu-berlin.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

geschenke-berlin.eu XSS vulnerability

Vulnerable URL: http://geschenke-berlin.eu/showcatrows.php?CategoryID=2"/ ="/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4437515 VIP website status:| No Coordinated Disclosure...

wias-berlin.de XSS vulnerability

Vulnerable URL: https://www.wias-berlin.de/publications/wias-publ/run.jsp?template=abstract=Preprint=xss%22%3E%3Csvg/onload=prompt%27openbugbounty%27%3E=2308 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 541098...

zahn-zahnarzt-berlin.de XSS vulnerability

Vulnerable URL: https://www.zahn-zahnarzt-berlin.de/suchergebnisse/suchergebnis.html Details: Description| Value ---|--- Patched:| Yes, at 18.08.2017 Latest check for patch:| 18.08.2017 06:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 405682 VIP website...

Huawei honor 6x driver buffer overflow vulnerability

Huawei honor 6x is a smartphone from Chinese company Huawei Huawei. A buffer overflow vulnerability exists in the driver in previous versions of the Huawei honor 6x Berlin-L21HNC432B360, which stems from the program's failure to adequately detect parameters. An attacker can exploit the...

mbi-berlin.de XSS vulnerability

Vulnerable URL: http://mbi-berlin.de/de/websearch/search.php?q=%22%2F%3E%27%3E%22%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 21:36 GMT Vulnerability type:| XSS Vulnerability...

tip-berlin.de XSS vulnerability

Vulnerable URL: https://www.tip-berlin.de/?s=a%3E%27%3E%22%3Et%3Ci%3Ep%3Cimg+src%3Dy+onerror%3Dprompt%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 255731 VIP website status:| No Che...

berlin-office.de XSS vulnerability

Vulnerable URL: https://www.berlin-office.de/cgi-local/angebotedemo.pl?Template=textkernlagen.html=%3E%27%3E%22%3Es%3Ci%3Ei%3Cimg+src%3Dx+onerror%3Dprompt%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS...

Huawei Honor 6X Security Bypass Vulnerability

Huawei Honor 6X is a smartphone from Chinese company Huawei Huawei. A security bypass vulnerability exists in Huawei Honor 6X Berlin-L22C636B150 and earlier versions due to the phone's lack of legitimacy verification for accessing Bluetooth devices. When a user turns on the smart unlock feature o...

Elefant CMS 1.3.12-RC Cross Site Request Forgery

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Elefant CMS 1.3.12-RC Fixed in: 1.3.13 Fixed Version https://github.com/jbroadway/elefant/releases/tag/ Link: elefant1313rc Vendor Website: https://www.elefantcms.com/ Vulnerability CSRF Type: Remote Yes Exploitable:...

service.berlin.de XSS vulnerability

Vulnerable URL: https://service.berlin.de/suche/stichwort/?x=sd'"--!...

MyBB 1.8.6 SQL Injection

Security Advisory - Curesec Research Team 1. Introduction Affected Product: MyBB 1.8.6 Fixed in: 1.8.7 Fixed Version Link: http://resources.mybb.com/downloads/mybb1807.zip Vendor Website: http://www.mybb.com/ Vulnerability Type: SQL Injection Remote Exploitable: Yes Reported to vendor: 01/29/2016...

jugendherbergen-berlin-brandenburg.de XSS vulnerability

Open Bug Bounty ID: OBB-164658 Description| Value ---|--- Affected Website:| jugendherbergen-berlin-brandenburg.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP...

mbi-berlin.de XSS vulnerability

Vulnerable URL: http://www.mbi-berlin.de/en/websearch/search.php?q=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2018408...

cms-berlin.de XSS vulnerability

Vulnerable URL: http://www.cms-berlin.de/en/VisitorService/SupportingProgrammeEvents/CMSForum/EventDetail.jsp?eventDateId=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability...