Lucene search
+L

70 matches found

OSV
OSV
added 2022/06/20 8:9 p.m.9 views

MAL-2022-120 Malicious code in @bijie/react-bnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3422e4bc5a6a154009ce08ac3e1d612d3b48dd39daf8f47c9a4663e2645296e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:9 p.m.5 views

Malicious code in @bijie/react-bnb-biz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ede4c180dc2f39e12f0471d05659916af0e84ecd50cf81af302dbb7883f3ce7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2022/03/05 5:19 a.m.14 views

bnb-net.de Improper Access Control vulnerability OBB-2409509

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2019/03/28 12:0 a.m.26 views

Airbnb Clone Script (Homeybnb) SQL Injection

Exploit Title: Homey BNB Airbnb Clone Script - Multiple SQL Injection Date: 27.03.2019 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.doditsolutions.com/airbnb-clone-script/ Demo Site: http://sitedemos.in/homeybnb/ Version: V4 Tested on: Kali Linux CVE: N/A ----- PoC 1: SQLi -----...

SaveExploits0
exploitpack
exploitpack
added 2019/03/28 12:0 a.m.37 views

Airbnb Clone Script - Multiple SQL Injection

Airbnb Clone Script - Multiple SQL Injection Exploit Title: Homey BNB Airbnb Clone Script - Multiple SQL Injection Date: 27.03.2019 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.doditsolutions.com/airbnb-clone-script/ Demo Site: http://sitedemos.in/homeybnb/ Version: V4 Tested on...

SaveExploits0
0day.today
0day.today
added 2019/03/28 12:0 a.m.79 views

Airbnb Clone Script Homey BNB - Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Homey BNB Airbnb Clone Script - Multiple SQL Injection Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.doditsolutions.com/airbnb-clone-script/ Demo Site: http://sitedemos.in/homeybnb/ Version: V4 Tested on: Kali...

0.1AI score
SaveExploits0
Prion
Prion
added 2017/06/16 12:29 p.m.16 views

Design/Logic Flaw

The "BNB Mobile Banking" by Brady National Bank app 3.0.0 -- aka bnb-mobile-banking/id674215747 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

4.3CVSS6.1AI score0.00486EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2017/06/16 12:29 p.m.24 views

CVE-2017-9582

The "BNB Mobile Banking" by Brady National Bank app 3.0.0 -- aka bnb-mobile-banking/id674215747 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9CVSS5.2AI score0.00486EPSS
SaveExploits0References1
CVE
CVE
added 2017/06/16 12:0 p.m.42 views

CVE-2017-9582

The CVE-2017-9582 entry concerns the iOS app “BNB Mobile Banking” ( Brady National Bank ) version 3.0.0, which does not verify X.509 certificates when connecting to SSL servers. This vulnerable behavior enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr...

5.9CVSS5.1AI score0.00486EPSS
SaveExploits0References1Affected Software1
seebug.org
seebug.org
added 2008/10/25 12:0 a.m.33 views

BNB Survey.cgi脚本远程执行任意命令漏洞

BugCVE: CVE-1999-0936 BUGTRAQ: 1817 Survey.cgi是Big Nose Bird提供的一个基于Web的用于调查问卷的脚本。Survey.cgi实现上存在一个输入验证漏洞,远程攻击者可能利用此漏洞在主机上以Web进程的权限执行任意命令。 脚本对于用户输入未做充分过滤,攻击者可能在输入中混入“|”、“”、“”等Shell管道符或重定向符来执行Shell命令。 1.0 Big Nose Bird ------------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: Big Nose Bird BNBSurvey 1.0: Big...

10CVSS6.8AI score0.04489EPSS
SaveExploits1
Rows per page
Query Builder