k12.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-960177 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

agri35.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-959143 Security Researcher geeknik Helped patch 8826 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting agri35.com website and its...

shibao7.com Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8584 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting shibao7.com website and its users. Following coordinated a...

posh24.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-956049 Security Researcher geeknik Helped patch 8722 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting posh24.com website and its...

diaoyan360.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-955928 Security Researcher geeknik Helped patch 8781 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting diaoyan360.com website and...

domainagency24.com Cross Site Scripting vulnerability

Security Researcher DerCraig Helped patch 24 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting domainagency24.com website and its users. Following coordinated and responsible...

row12.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-954917 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting row12.com website and its...

Magecart criminals caught stealing with their poker face on

Earlier in June, we documented how Magecart credit card skimmers were found on Amazon S3. This was an interesting development, since threat actors weren't actively targeting specific e-commerce shops, but rather were indiscriminately injecting any exposed S3 bucket. Ever since then, we've monitor...

hele1980.com Cross Site Scripting vulnerability

Security Researcher Dipu1A Helped patch 961 vulnerabilities Received 5 Coordinated Disclosure badges Received 21 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting hele1980.com website and its users. Following coordinated an...

logistics1.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-950518 Security Researcher Hchabik Helped patch 2419 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting logistics1.com website and i...

CVE-2019-1184

An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar improperly handles COM calls. An attacker who successfully exploited this vulnerability could potentially set certain items to run at a higher level and thereby elevate permissions. To exploit this...

CVE-2019-1184

CVE-2019-1184 is a Windows elevation-of-privilege issue in the Windows Core Shell COM Server Registrar that arises from improperly handling COM calls. Exploitation requires a logged-on user who runs a specially crafted application, enabling higher-privilege execution on an affected system. Affect...

CVE-2019-1184: Undefined Security Weakness

An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar improperly handles COM calls. An attacker who successfully exploited this vulnerability could potentially set certain items to run at a higher level and thereby elevate permissions. To exploit this...

PT-2019-13940

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.9.11 Description The issue arises from inadequate checks in the com contact component, which could allow mail submission in forms where it has been disabled. Recommendations For versions prior to 3.9.11, update to...

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar improperly handles COM calls. An attacker who successfully exploited this vulnerability could potentially set certain items to run at a higher level and thereby elevate permissions. To exploit this...

extranet.as24.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-932585 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting extranet.as24.com website...

1xdota2.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-928545 Security Researcher 4NCURZE Helped patch 1546 vulnerabilities Received 7 Coordinated Disclosure badges Received 13 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting 1xdota2.com website and its...

job509.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-927373 Security Researcher IAMMUSTAFA Helped patch 521 vulnerabilities Received 9 Coordinated Disclosure badges Received 51 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting job509.com website and it...

CVE-2019-14695

A SQL injection vulnerability exists in the Sygnoos Popup Builder plugin before 3.45 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via com/libs/Table.php because Subscribers Table ordering is...

CVE-2019-14695: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability exists in the Sygnoos Popup Builder plugin before 3.45 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via com/libs/Table.php because Subscribers Table ordering is...