70 matches found
MAL-2022-120 Malicious code in @bijie/react-bnb (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3422e4bc5a6a154009ce08ac3e1d612d3b48dd39daf8f47c9a4663e2645296e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @bijie/react-bnb-biz (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ede4c180dc2f39e12f0471d05659916af0e84ecd50cf81af302dbb7883f3ce7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
bnb-net.de Improper Access Control vulnerability OBB-2409509
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Airbnb Clone Script (Homeybnb) SQL Injection
Exploit Title: Homey BNB Airbnb Clone Script - Multiple SQL Injection Date: 27.03.2019 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.doditsolutions.com/airbnb-clone-script/ Demo Site: http://sitedemos.in/homeybnb/ Version: V4 Tested on: Kali Linux CVE: N/A ----- PoC 1: SQLi -----...
Airbnb Clone Script - Multiple SQL Injection
Airbnb Clone Script - Multiple SQL Injection Exploit Title: Homey BNB Airbnb Clone Script - Multiple SQL Injection Date: 27.03.2019 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.doditsolutions.com/airbnb-clone-script/ Demo Site: http://sitedemos.in/homeybnb/ Version: V4 Tested on...
Airbnb Clone Script Homey BNB - Multiple SQL Injection Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Homey BNB Airbnb Clone Script - Multiple SQL Injection Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.doditsolutions.com/airbnb-clone-script/ Demo Site: http://sitedemos.in/homeybnb/ Version: V4 Tested on: Kali...
Design/Logic Flaw
The "BNB Mobile Banking" by Brady National Bank app 3.0.0 -- aka bnb-mobile-banking/id674215747 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2017-9582
The "BNB Mobile Banking" by Brady National Bank app 3.0.0 -- aka bnb-mobile-banking/id674215747 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2017-9582
The CVE-2017-9582 entry concerns the iOS app “BNB Mobile Banking” ( Brady National Bank ) version 3.0.0, which does not verify X.509 certificates when connecting to SSL servers. This vulnerable behavior enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr...
BNB Survey.cgi脚本远程执行任意命令漏洞
BugCVE: CVE-1999-0936 BUGTRAQ: 1817 Survey.cgi是Big Nose Bird提供的一个基于Web的用于调查问卷的脚本。Survey.cgi实现上存在一个输入验证漏洞,远程攻击者可能利用此漏洞在主机上以Web进程的权限执行任意命令。 脚本对于用户输入未做充分过滤,攻击者可能在输入中混入“|”、“”、“”等Shell管道符或重定向符来执行Shell命令。 1.0 Big Nose Bird ------------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: Big Nose Bird BNBSurvey 1.0: Big...