PT-2023-25572

Name of the Vulnerable Software and Affected Versions Boss Mini version 1.4.0 Build 6221 Description A critical issue affects an unknown part of the file boss/servlet/document, where the manipulation of the path argument leads to file inclusion. This can be initiated remotely. Recommendations For...

Yanluowang Ransomware Leaks Analysis: Organization, Collaboration with HelloKitty, Babuk and Conti

Yanluowang Ransomware Leaks Analysis: Organization, Collaboration with HelloKitty, Babuk and Conti By Jambul Tologonov· November 22, 2022 Introduction On October 31, 2022, Yanluowang’s TOR site was hacked displaying a message “check and mate!! Yanluowang Matrix chat hacked @yanluowangleaks Time’s...

CVE-2022-34827

Carel Boss Mini 1.5.0 has Improper Access Control...

CVE-2022-34827

Carel Boss Mini 1.5.0 has Improper Access Control...

Improper access control

Carel Boss Mini 1.5.0 has Improper Access Control...

CVE-2022-34827

Carel Boss Mini 1.5.0 has Improper Access Control...

PT-2022-22379 · Carel · Carel Boss Mini

Name of the Vulnerable Software and Affected Versions: Carel Boss Mini version 1.5.0 Description: The issue is related to Improper Access Control. Recommendations: For Carel Boss Mini version 1.5.0, at the moment, there is no information about a newer version that contains a fix for this issue...

CVE-2022-34827

CVE-2022-34827 affects Carel Boss Mini 1.5.0. The issue is described as Improper Access Control, with public records noting network-based access, low attack complexity, and low privileges required. Impact is rated high for confidentiality, integrity, and availability. Public sources include Red H...

Carel Boss Mini 安全漏洞

Carel Boss Mini is a locally supervised solution for small, medium and large systems from Carel Italy. A security vulnerability exists in Carel Boss Mini version 1.5.0 that stems from improper access control...

CVE-2022-34827

Carel Boss Mini 1.5.0 has Improper Access Control...

The vulnerability of the implementation of the ROC protocol for microprogrammed programmable logic controllers FloBoss allows a hacker to execute arbitrary code.

The vulnerability of the ROC protocol implementation in FloBoss microprogrammed logic controllers is related to insecure management of privileges. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

MAL-2022-1654 Malicious code in boss-alien-media-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec6d9c2b92bc162366140bf44556ce9675bd37d4c56bfbd1e62e23b1dae0d69d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in boss-alien-media-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec6d9c2b92bc162366140bf44556ce9675bd37d4c56bfbd1e62e23b1dae0d69d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

boss-hyoban.com Cross Site Scripting vulnerability OBB-2137031

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SQL Injection Vulnerability in Asset Management System of Fujian Boss Software Co.

Fujian BOSS Software Co., Ltd. is the undertaking unit of "National Torch Plan Project" and "Innovation Fund Support Project" of Ministry of Science and Technology. A SQL injection vulnerability exists in the asset management system of Fujian Boss Software Co., Ltd, which can be exploited by...

boss-turkey.com Cross Site Scripting vulnerability OBB-1424902

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Booter Boss Busted By Bacon Pizza Buy

A Pennsylvania man who operated one of the Internet's longest-running online attack-for-hire or "booter" services was sentenced to five years probation today. While the young man's punishment was heavily tempered by his current poor health, the defendant's dietary choices may have contributed to...

boss-nekretnine.com XSS vulnerability

Open Bug Bounty ID: OBB-648077 Description| Value ---|--- Affected Website:| boss-nekretnine.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

boss-nekretnine.com XSS vulnerability

Open Bug Bounty ID: OBB-630666 Description| Value ---|--- Affected Website:| boss-nekretnine.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sbazar.cz XSS vulnerability

Open Bug Bounty ID: OBB-552485 Description| Value ---|--- Affected Website:| sbazar.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure...