7418 matches found
dengta120.com Cross Site Scripting vulnerability OBB-4032557
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
crx4.com Cross Site Scripting vulnerability OBB-4031662
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
MAL-2025-1659 Malicious code in com.google.xr.windowmirror (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a30f6dc18fdffef5324dbb982dca12e85ef0fd16fc96a6aa4677f023d4c3b79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
jaxci.com Cross Site Scripting vulnerability OBB-4031217
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
startbutton8.com Cross Site Scripting vulnerability OBB-4030851
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2025-0889
Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM objects under certain circumstances where an EPM policy allows for automatic privilege elevation of a user process...
oto75.com Cross Site Scripting vulnerability OBB-4030782
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2025-0889
Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM objects under certain circumstances where an EPM policy allows for automatic privilege elevation of a user process...
CVE-2025-0889
Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM objects under certain circumstances where an EPM policy allows for automatic privilege elevation of a user process...
CVE-2025-0889
CVE-2025-0889 affects BeyondTrust Privilege Management for Windows prior to version 25.2. A local authenticated attacker can elevate privileges on a system that has EPM installed by manipulating COM objects under circumstances where an EPM policy allows automatic privilege elevation of a user pro...
CVE-2025-22207
Improperly built order clauses lead to a SQL injection vulnerability in the backend task list of comscheduler...
CVE-2024-12586 Chalet Montagne Com Tools <= 2.7.8 - Reflected XSS
The Chalet-Montagne.com Tools WordPress plugin through 2.7.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
org.webjars.npm:github-com-xdan-datetimepicker (2.5.20), org.webjars.npm:jquery-datetimepicker (>=2.5.4, <=2.5.21) potentially affected by CVE-2024-57063 via org.webjars.npm:php-date-formatter (1.3.6)
org.webjars.npm:php-date-formatter MAVEN version 1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:php-date-formatter and may be impacted: - org.webjars.npm:github-com-xdan-datetimepicker 2.5.20 - org.webjars.npm:jquery-datetimepick...
CVE-2020-13534
A privilege escalation vulnerability exists in Dream Report 5 R20-2. COM Class Identifiers CLSID, installed by Dream Report 5 20-2, reference LocalServer32 and InprocServer32 with weak privileges which can lead to privilege escalation when used. An attacker can provide a malicious file to trigger...
CVE-2024-6510
Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking...
Windows Bug Class: Accessing Trapped COM Objects with IDispatch
Posted by James Forshaw, Google Project Zero Object orientated remoting technologies such as DCOM and .NET Remoting make it very easy to develop an object-orientated interface to a service which can cross process and security boundaries. This is because they're designed to support a wide range of...
PT-2025-3978 · Transsion · Com.Transsion.Carlcare
Name of the Vulnerable Software and Affected Versions: com.transsion.carlcare affected versions not specified Description: The issue is related to improper permission settings for mobile applications, which may lead to information leakage risk. Recommendations: At the moment, there is no...
CVE-2025-21288
Windows COM Server Information Disclosure Vulnerability...