184 matches found
AccPack Buzz 1.0 Insecure Direct Object Reference
============================================================================================================================================= | Title : AccPack Buzz v1.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | | Vend...
AccPack Buzz 1.0 SQL Injection
============================================================================================================================================= | Title : AccPack Buzz v1.0 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits ...
AccPack Buzz 1.0 Arbitrary File Upload
============================================================================================================================================= | Title : AccPack Buzz v1.0 Remote File Upload Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64...
aishell (>=2023.3.3, <=2023.4.11), anicli-api (>=0.3.0, <=0.3.8) +45 more potentially affected by CVE-2024-38519 via yt-dlp (2023.12.30)
yt-dlp PYPI version 2023.12.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - aishell =2023.3.3, =0.3.0, =1.4.0, =0.1.0, =1.0.2, =2.0.0a1, =2.3.10, =0.2.0, =0.4.1, =0.1.4, =0.0.1, =0.1.0, =0.1.1, =1.2.1 and more Source...
amusing-app (>=0.2.0, <=0.4.2), buzz-captions (>=1.0.0, <=1.1.0) +10 more potentially affected by CVE-2024-38519 via yt-dlp (>=2024.3.10, <=2024.5.27)
yt-dlp PYPI version =2024.3.10, =0.2.0, =1.0.0, =1.3.5, =0.6.22, =0.2.0, =0.0.5, =0.0.1, =0.1.50, =0.8.0, =2024.3.19, =2024.6.6 Source cves: CVE-2024-38519 Source advisory: GHSA-79W7-VH3H-8G4J...
buzz-holdings.jp Cross Site Scripting vulnerability OBB-3898936
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress Blogger Buzz Theme <= 1.2.2 is vulnerable to Broken Access Control
Software Blogger Buzz Type Theme Vulnerable versions = 1.2.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-30476 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID b1de090398f6 Credits Dave Jong Patchstack Required...
aesti (>=0.1.0, <=0.3.0), atarashii_imap (0.3.0) +357 more potentially affected by unknown CVE via openssl (>=0.9.24, <=0.10.40)
openssl CARGO version =0.9.24, =0.1.0, =0.1.0, =0.2.0, =0.15.0, =0.3.1, =0.0.1, =0.3.2, =0.1.1, =0.1.4, =0.1.0, =0.1.3, =0.4.0, =0.5.4 and more Source cves: unknown CVE Source advisory: GHSA-9QWG-CRG9-M2VC...
desafio_buzz_woody SQL injection vulnerability
desafiobuzzwoody is an application by Bruno Mattoso Gonçalves Personal Developer. A SQL injection vulnerability exists in desafiobuzzwoody that stems from unknown processing that operates to cause SQL injection...
PT-2023-10227 · Unknown · Desafio Buzz Woody
Name of the Vulnerable Software and Affected Versions: desafio buzz woody affected versions not specified Description: A critical issue affects some unknown processing, leading to sql injection. The manipulation with this issue can cause significant problems. There is no information provided abou...
kenyabuzz.com Cross Site Scripting vulnerability OBB-2140196
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-29437
SQL injection in the Buzz module of OrangeHRM through 4.6 allows remote authenticated attackers to execute arbitrary SQL commands via the orangehrmBuzzPlugin/lib/dao/BuzzDao.php loadMorePostsFormprofileUserId parameter to the buzz/loadMoreProfile endpoint...
Sql injection
SQL injection in the Buzz module of OrangeHRM through 4.6 allows remote authenticated attackers to execute arbitrary SQL commands via the orangehrmBuzzPlugin/lib/dao/BuzzDao.php loadMorePostsFormprofileUserId parameter to the buzz/loadMoreProfile endpoint...
CVE-2020-29437
SQL injection in the Buzz module of OrangeHRM through 4.6 allows remote authenticated attackers to execute arbitrary SQL commands via the orangehrmBuzzPlugin/lib/dao/BuzzDao.php loadMorePostsFormprofileUserId parameter to the buzz/loadMoreProfile endpoint...
CVE-2020-29437
CVE-2020-29437 describes an SQL injection in the Buzz module of OrangeHRM (up to version 4.6) that allows remote authenticated attackers to execute arbitrary SQL commands via the loadMorePostsForm[profileUserId] parameter to the buzz/loadMoreProfile endpoint. The underlying issue is unvalidated i...
CVE-2020-29437
SQL injection in the Buzz module of OrangeHRM through 4.6 allows remote authenticated attackers to execute arbitrary SQL commands via the orangehrmBuzzPlugin/lib/dao/BuzzDao.php loadMorePostsFormprofileUserId parameter to the buzz/loadMoreProfile endpoint...
CVE-2020-29437: Improper Neutralization of Special Elements used in an SQL Command
SQL injection in the Buzz module of OrangeHRM through 4.6 allows remote authenticated attackers to execute arbitrary SQL commands via the orangehrmBuzzPlugin/lib/dao/BuzzDao.php loadMorePostsFormprofileUserId parameter to the buzz/loadMoreProfile endpoint...
PT-2021-11664
Name of the Vulnerable Software and Affected Versions: OrangeHRM versions through 4.6 Description: The issue allows remote authenticated attackers to execute arbitrary SQL commands via the loadMorePostsFormprofileUserId parameter to the "buzz/loadMoreProfile" endpoint. This is due to a SQL...
worldofbuzz.com Improper Access Control vulnerability OBB-1381394
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Popcorn Buzz: Free Group Calls - Corrupted files, External URLs, KeyStore usage vulnerabilities
HackApp vulnerability scanner discovered that application Popcorn Buzz: Free Group Calls published at the 'play' market has multiple vulnerabilities...