inthepaddock.co.uk Cross Site Scripting vulnerability OBB-1335825

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2017-2107

CVE-2017-2107 concerns Self-extracting archives created by the 7-ZIP32.DLL library (versions 9.22.00.01 and earlier). The root cause is an insecure DLL search path (CWE-427) in the self-extracting archive loading process, allowing an attacker to execute arbitrary code with user privileges if a Tr...