973 matches found
Exploit for Missing Initialization of Resource in Linux Linux_Kernel
CVE-2022-29968 Proof-of-concept exploit for CVE-2022-29968 un...
The Bug Report - March 2022 Edition
The Bug Report - March 2022 By Charles McFarland · April 6, 2022 Your Cybersecurity Comic Relief Comic from https://geek-and-poke.com/ and remains unedited. https://creativecommons.org/licenses/by/3.0/ Use of this comic does not indicate endorsement by the creator. Why am I here? Welcome back the...
zai.illious.ru Cross Site Scripting vulnerability OBB-2462965
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SUSE-SU-2022:1050-1 Security update for SUSE Manager 4.2.5.1 Release Notes
This update for SUSE Manager 4.2.5.1 Release Notes provides the following additions: Release notes for SUSE Manager: - Update to 4.2.5.1 CVEs fixed CVE-2022-22934, CVE-2022-22935, CVE-2022-22936, CVE-2022-22941 Bugs mentioned bsc1197417...
SUSE-SU-2022:1049-1 Security update for SUSE Manager 4.1.14.1 Release Notes
This update for SUSE Manager 4.1.14.1 Release Notes provides the following additions: Release notes for SUSE Manager: - Update to 4.1.14.1 CVEs fixed CVE-2022-22934, CVE-2022-22935, CVE-2022-22936, CVE-2022-22941 Bugs mentioned bsc1197417...
GitHub Security Lab: [Java]: Add JDBC connection SSRF sinks
This bug was reported directly to GitHub Security Lab...
User enumeration setting not obeyed in User Status API
None...
CVE-2022-0696
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428...
Twitter: Delete direct message history without access the proper conversation_id
Hello Team i found a bug in your system this bug already fixed as i know,but i try this another way, and its worked, this is why i report it the bug is i was able to delete message history without access the proper conversation id user 1 id: 1234 user 2 id: 5678 their conversation look like...
The Bug Report November 2021 Edition
The Bug Report — November 2021 Edition By Mark Bereza · November 30, 2021 Your Cybersecurity Comic Relief CVE-2021-20322: Of all the words of mice and men, the saddest are, “it was DNS again.” Why am I here? For all our newcomers, welcome to the Advanced Threat Research team’s monthly bug report ...
The Bug Report November 2021 Edition
The Bug Report — November 2021 Edition By Mark Bereza · November 30, 2021 Your Cybersecurity Comic Relief CVE-2021-20322: Of all the words of mice and men, the saddest are, “it was DNS again.” Why am I here? For all our newcomers, welcome to the Advanced Threat Research team’s monthly bug report ...
CVE-2021-43618
GNU Multiple Precision Arithmetic Library GMP through 6.2.1 has an mpz/inpraw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms...
in elgg/elgg
Hello there! Hope you're having an awesome day :D Actually, it's been a few months since I found this bug, but I had no success in trying to contact you guys, and now I discovered that you're on Huntr. So now I'm sending my report from here : Summary During this week, I was participating at a bug...
GitHub Security Lab: Yet another SSRF query for Javascript
This bug was reported directly to GitHub Security Lab...
URL Redirection to Untrusted Site ('Open Redirect') in fastify-static
Impact A redirect vulnerability in the fastify-static module allows remote attackers to redirect Mozilla Firefox users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e. The issue shows up on all the fastify-static applications that set...
OSV-2021-1322 Heap-buffer-overflow in cdf_read_property_info
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38898 Crash type: Heap-buffer-overflow READ Crash state: cdfreadpropertyinfo cdfunpacksummaryinfo cdfchecksummaryinfo...
GitHub Security Lab: Java: Static initialization vector
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [go]: Add query for detecting CORS misconfiguration
This bug was reported directly to GitHub Security Lab...