cs.rutgers.edu Cross Site Scripting vulnerability OBB-3712300

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cs-a.pt Cross Site Scripting vulnerability OBB-3588836

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cssoftware.pl Cross Site Scripting vulnerability OBB-3573653

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-9832

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a possible use-after-free UAF vulnerability in the amdgpu cs pass1 function. This vulnerability may allow an attacker to impact the confidentiality, integrity, an...

CVE-2023-38744

Denial-of-service DoS vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit. If an affected product receives a packet which is specially...

OMRON CJ series and CS/CJ Series EtherNet/IT unit vulnerable to Denial-of-Service (DoS)

Overview Denial-of-service DoS vulnerability due to improper validation of specified type of input CWE-1287 issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit provided by OMRON Corporation. OMRON...

EZVIZ CS Series Buffer Error Vulnerability

EZVIZ CS Series is a series of cameras from the Chinese company EZVIZ. A security vulnerability exists in the EZVIZ CS Series that originates from two stack buffer overflows in the netClientSetWlanCfg function of the ZVIZ SDK Command Server, which allows remote code execution by an authenticated...

EZVIZ CS Series Buffer Error Vulnerability

EZVIZ CS Series is a series of cameras from the Chinese company EZVIZ. The EZVIZ CS Series suffers from a security vulnerability that stems from two stack-based buffer overflows in the mulicastparsesadppacket and mulicastgetpacktype functions of the SADP multicast protocol, which allow an...

cs.best-boats24.net Cross Site Scripting vulnerability OBB-3527527

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-35351 Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

...

CVE-2023-35351

CVE-2023-35351: Windows Active Directory Certificate Services (AD CS) Remote Code Execution vulnerability. Affected: Windows AD CS; vulnerability type is remote code execution. CVSSv3.1 base score 6.6 (vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H). Exploitation status and detailed root ca...

CVE-2023-35350

Technical details for CVE-2023-35350 are not publicly available in the provided documents. Affected product/impact/root cause are not disclosed here. Monitor for updates and official advisories.

CVE-2023-27396

FINS Factory Interface Network Service is a message communication protocol, which is designed to be used in closed FA Factory Automation networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues --...

CVE-2023-27396

FINS Factory Interface Network Service is a message communication protocol, which is designed to be used in closed FA Factory Automation networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues --...

cs.unipi.gr Cross Site Scripting vulnerability OBB-3384417

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Metasploit Weekly Wrap-Up

AD CS certificate templates Our very own Spencer McIntyre has developed a new module that allows for creating, reading, updating and deleting certificate template objects from Active Directory. ESC4 Exploitation These changes notably enables the exploitation of the technique identified as ESC4...

CVE-2022-47611

Cross-Site Request Forgery CSRF vulnerability in Julian Weinert // cs&m Hover Image plugin = 1.4.1 versions...

CVE-2022-47611

The CVE-2022-47611 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Hover Image plugin, affecting versions up to 1.4.1. Affected component: Hover Image plugin for WordPress. Root cause: CSRF vulnerability that can be triggered by an unauthenticated actor to coerc...

CVE-2022-47611 WordPress Hover Image Plugin <= 1.4.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Julian Weinert // cs&m Hover Image plugin = 1.4.1 versions...

PT-2023-15434 · WordPress · Cs&M Hover Image Plugin

Name of the Vulnerable Software and Affected Versions: Julian Weinert // cs&m Hover Image plugin versions 1.4.1 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintende...