ccc-web.net Cross Site Scripting vulnerability OBB-3883951

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

OESA-2023-1193 curl security update

cURL is a computer software project providing a library libcurl and command-line tool curl for transferring data using various protocols. Security Fixes: libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However,...

Google Pixel security vulnerabilities

Google Pixel, a smartphone from Google, is vulnerable to a logic error in the buildCommand of bluetoothccc.cc, which can be exploited to cause elevation of privileges...

CVE-2023-21040

In buildCommand of bluetoothccc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

PUB-A-238420277

In buildCommand of bluetoothccc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

h1-ctf: ccc ctf

██████████ will send detailed report later Impact can get admin credentials...

Cyberoam CC v02.03.1 - Multiple Persistent Vulnerabilities

Document Title: =============== Cyberoam CC v02.03.1 - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1721 Cyberoam Ticket ID: 1001314 Case ID: CCC-4208 Release Date: ============= 2016-04-18 Vulnerability Laboratory ...

Bugzilla Vulnerability Exposes Bug Collections

Hundreds of open source software projects that make use of Bugzilla, Mozilla’s bug-tracking software, anxiously await a patch for a vulnerability that exposes private bugs collected by the system. Mozilla is today expected to make available a patch for the vulnerability in its account creation...

PT-2014-6498

Name of the Vulnerable Software and Affected Versions Sophos Cyberoam appliances with CyberoamOS versions prior to 10.6.1 GA Description The issue allows remote authenticated users to inject arbitrary commands via specific opcodes, including checkcert key, webclient portal settings, sslvpn liveus...

CVE-2012-1047

CVE-2012-1047 describes a directory traversal vulnerability in the WWWHELP Service (js/html/wwhelp.htm) of Cyberoam Central Console (CCC) 2.00.2 . The flaw allows remote attackers to include and execute arbitrary local files by using a “..” in the file parameter of an Online_help action. This is ...

CVE-2012-1047: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the WWWHELP Service js/html/wwhelp.htm in Cyberoam Central Console CCC 2.00.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the file parameter in an Onlinehelp action...

Unfixed XSS vulnerability at www.interes.top.ge

Security researcher CCC, has submitted on 30/01/2011 a cross-site-scripting XSS vulnerability affecting www.interes.top.ge, which at the time of submission ranked 26537 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...

Unfixed XSS vulnerability at www.oclc.dk

Security researcher CCC, has submitted on 25/06/2010 a cross-site-scripting XSS vulnerability affecting www.oclc.dk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/11/2010. It is currently unfixed. I...

Unfixed XSS vulnerability at ddrn.dk

Security researcher CCC, has submitted on 25/06/2010 a cross-site-scripting XSS vulnerability affecting ddrn.dk, which at the time of submission ranked 4815516 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/11/2010. It is currently unfixed...

Unfixed XSS vulnerability at egitimofis.com

Security researcher CCC, has submitted on 18/04/2009 a cross-site-scripting XSS vulnerability affecting egitimofis.com, which at the time of submission ranked 482979 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2010. It is currently...

Unfixed XSS vulnerability at www.ucaecho.net

Security researcher CCC, has submitted on 12/11/2008 a cross-site-scripting XSS vulnerability affecting www.ucaecho.net, which at the time of submission ranked 948223 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is currently...

Unfixed XSS vulnerability at www.polskieradio.pl

Security researcher CCC, has submitted on 11/03/2008 a cross-site-scripting XSS vulnerability affecting www.polskieradio.pl, which at the time of submission ranked 16260 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2008. It is currentl...

Unfixed XSS vulnerability at www.tmecca.co.kr

Security researcher CCC, has submitted on 11/03/2008 a cross-site-scripting XSS vulnerability affecting www.tmecca.co.kr, which at the time of submission ranked 1739387 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2008. It is currently...

Unfixed XSS vulnerability at shellcity.net

Security researcher CCC, has submitted on 11/03/2008 a cross-site-scripting XSS vulnerability affecting shellcity.net, which at the time of submission ranked 127689 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/04/2008. It is currently...

Unfixed XSS vulnerability at www.radiocity.co.uk

Security researcher CCC, has submitted on 10/04/2008 a cross-site-scripting XSS vulnerability affecting www.radiocity.co.uk, which at the time of submission ranked 487437 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2008. It is current...