108 matches found
Hardcoded credentials
An information leak in Nabu Casa Home Assistant Operating System and Home Assistant Supervised 2022.03 allows a DNS operator to gain knowledge about internal network resources via the hardcoded DNS resolver configuration...
CVE-2020-36517
CVE-2020-36517 concerns an information leak in Nabu Casa Home Assistant Operating System and Home Assistant Supervised 2022.03. The vulnerability arises from a hardcoded DNS resolver configuration, which may allow a DNS operator to gain knowledge about internal network resources. The connected do...
CVE-2020-36517
An information leak in Nabu Casa Home Assistant Operating System and Home Assistant Supervised 2022.03 allows a DNS operator to gain knowledge about internal network resources via the hardcoded DNS resolver configuration...
casa-immo.de Improper Access Control vulnerability OBB-2405492
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
casa-de-salud.com Cross Site Scripting vulnerability OBB-2353506
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
casa-borlo.com Cross Site Scripting vulnerability OBB-2144750
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
casadoconhecimento.pt Open Redirect vulnerability OBB-2132831
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2019-14453
An issue was discovered in Comelit "App lejos de casa web" 2.8.0. It allows privilege escalation via modified domus and logged fields, related to js/bridge.min.js and login.json. For example, an attacker can achieve high privileges installer or administrator for the graphical interface via a...
CVE-2019-14453
CVE-2019-14453 affects Comelit App lejos de casa (web) 2.8.0. A privilege-escalation flaw is triggered by modifications to domus and logged fields, related to js/bridge.min.js and login.json, enabling attackers to achieve installer/administrator level within the graphical interface (e.g., via a 1...
Comelit App lejos de casa 安全漏洞
Comelit App lejos de casa is a home automation application from the Spanish company Comelit. A security vulnerability in Comelit App lejos de casa 2.8.0 allows attackers to elevate privileges via modified domain and log fields associated with js/bridge.min.js and login.json...
casa-merlin.com Cross Site Scripting vulnerability OBB-1434884
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
blog.casa-andina.com Cross Site Scripting vulnerability OBB-1402785
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
casa-service.de Cross Site Scripting vulnerability OBB-1400891
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
mia-casa-immobilien.de Cross Site Scripting vulnerability OBB-1342130
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
casa-betulla.ch Cross Site Scripting vulnerability OBB-1315706
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
casa.sapo.pt Open Redirect vulnerability
Open Bug Bounty ID: OBB-1159183 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
casa-pizza.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1071016 Security Researcher Zodx Helped patch 35 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting casa-pizza.com website and its users. Following coordinated...
casa-di-cura.eu XSS vulnerability
Open Bug Bounty ID: OBB-710681 Description| Value ---|--- Affected Website:| casa-di-cura.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
casa-diroma.fr XSS vulnerability
Open Bug Bounty ID: OBB-659029 Description| Value ---|--- Affected Website:| casa-diroma.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
chicago.casasdeventa.casa XSS vulnerability
Open Bug Bounty ID: OBB-584379 Description| Value ---|--- Affected Website:| chicago.casasdeventa.casa Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...