592 matches found
BigBlueButton 2.2.29 Brute Force
Title: BigBlueButton Meeting Access Code Brute Force Vulnerability Google Dork: N/A Date: 24.11.2020 Author: Seccops https://seccops.com Vendor Homepage: bigbluebutton.org Version: 2.2.29 and previous versions CVE: CVE-2020-29042 === Summary === An issue was discovered in BigBlueButton through...
BigBlueButton has an unspecified vulnerability (CNVD-2022-82641)
BigBlueButton is an open source Web conferencing system from the BigBlueButton community. versions prior to BigBlueButton 2.2.29 have a security vulnerability that could be exploited by an attacker to cast multiple votes in a single poll...
BigBlueButton has an unspecified vulnerability
BigBlueButton is an open source Web conferencing system from the BigBlueButton community. security vulnerabilities exist in versions prior to BigBlueButton 2.2.29, the source of the vulnerability lacks cleanup for certain parameters, as evidenced by the control characters in the accepted username...
CVE-2020-28954
web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitization, as demonstrated by accepting control characters in a user name...
CVE-2020-28953
In BigBlueButton before 2.2.29, a user can vote more than once in a single poll...
CVE-2020-28954
web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitization, as demonstrated by accepting control characters in a user name...
CVE-2020-28953
In BigBlueButton before 2.2.29, a user can vote more than once in a single poll...
Code injection
In BigBlueButton before 2.2.29, a user can vote more than once in a single poll...
CVE-2020-28953
In BigBlueButton before 2.2.29, a user can vote more than once in a single poll, enabling poll manipulation. The available description does not specify the underlying root cause, exact component/file, or affected versions beyond the 2.2.29 threshold. No remediation details are provided in the doc...
CVE-2020-28953
In BigBlueButton before 2.2.29, a user can vote more than once in a single poll...
CVE-2020-28954
BigBlueButton is affected by CVE-2020-28954 due to inadequate parameter sanitization in web/controllers/ApiController.groovy, allowing control characters to be accepted in a user name. This affects versions prior to 2.2.29. The vulnerability is described across multiple sources (NVD/Red Hat/CNVD)...
CVE-2020-28954
web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitization, as demonstrated by accepting control characters in a user name...
BigBlueButton 安全漏洞
BigBlueButton is an open source Web conferencing system from the BigBlueButton community. versions prior to BigBlueButton 2.2.29 have a security vulnerability that could be exploited by an attacker to cast multiple votes in a single poll...
BigBlueButton 安全漏洞
BigBlueButton is an open source Web conferencing system from the BigBlueButton community. security vulnerabilities exist in versions prior to BigBlueButton 2.2.29, the source of the vulnerability lacks cleanup for certain parameters, as evidenced by the control characters in the accepted username...
BigBlueButton 2.2.25 - Arbitrary File Disclosure and Server-Side Request Forgery
Exploit Title: BigBlueButton 2.2.25 - Arbitrary File Disclosure and Server-Side Request Forgery Date: 2020-09-11 Exploit Author: RedTeam Pentesting GmbH Vendor Homepage: https://bigbluebutton.org/ Version: BigBlueButton 2.2.25 RedTeam Pentesting discovered a vulnerability in the BigBlueButton web...
Exploit for CVE-2020-27603
CVE-2020-27603-bbb-libreoffice-poc Proof of Concept of Libreof...
BigBlueButton Greenlight has an unspecified vulnerability
BigBlueButton is an open source Web conferencing system from the BigBlueButton community. versions prior to BigBlueButton Greenlight 2.5.6 have a security vulnerability that stems from an allow HTTP header host and source attack, which can be exploited by an attacker to cause an account takeover...
BigBlueButton Greenlight Cross-Site Scripting Vulnerability
BigBlueButton is BigBlueButton community of a set of open source Web conferencing system . A cross-site scripting vulnerability exists in BigBlueButton Greenlight version 2.7.6, which stems from a cross-site scripting XSS vulnerability in the "merge account" function of admin .js. No details of t...
BigBlueButton Server-Side Request Forgery Vulnerability
BigBlueButton is BigBlueButton community of a set of open source Web conferencing system . A server-side request forgery vulnerability exists in versions prior to BigBlueButton 2.2.7 that allows an attacker to read a local file and perform an SSRF attack via an uploaded Office document with a...