33 matches found
standaarduitgeverij.be Improper Access Control vulnerability OBB-1478346
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2018-15440
creationtimestamp| type| source ---|---|--- 2019-02-06 00:27:14+00:00| seen| MISP/5c5a293b-d05c-4a31-999a-199d0a021402...
mrgcharter.org XSS vulnerability
Open Bug Bounty ID: OBB-715345 Description| Value ---|--- Affected Website:| mrgcharter.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
at.atwola.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-597114 Description| Value ---|--- Affected Website:| at.atwola.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
cascadetraining.com XSS vulnerability
Open Bug Bounty ID: OBB-447333 Description| Value ---|--- Affected Website:| cascadetraining.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...
Android system_server Privilege Acquisition Vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which System Server is a system server. A privilege acquisition vulnerability exists in systemserver in versions of Android prior to 2016-10-05 on Nexus-based devices. An...
120.35.29.73 XSS vulnerability
Vulnerable URL: http://120.35.29.73:81/WaiLianService/json/bjtjjson.jsp?callback=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...
epadult.com Open Redirect vulnerability
Vulnerable URL: http://www.epadult.com/js/redir.jsp?url=http://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:21 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
kb.netapp.com Open Redirect vulnerability
Vulnerable URL: https://kb.netapp.com/support/index?page=answerlink=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 12.04.2016 Latest check for patch:| 12.04.2016 18:07 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...
e-medida.es XSS vulnerability
Vulnerable URL: http://www.e-medida.es/hemerotecan4!prettyPhoto/0,%3Cimg%20src=x%20onerror=alert%28/XSSPOSED/%29%3E/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2706808 Google...
CVE-2015-0273
Multiple use-after-free vulnerabilities in ext/date/phpdate.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a 1 R or 2 r type specifier in a DateTimeZone data handled by the...
CVE-2012-5691
creationtimestamp| type| source ---|---|--- 2012-12-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23694 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/realplayerurlpropertybof.rb 2025-02-06...
CVE-2005-2658
Turquoise SuperStat (turqstat) up to version 2.2.4 is affected by a buffer overflow in utility.cpp that can allow remote NNTP servers to execute arbitrary code when a date with a long month is processed. Public advisories (Debian DSA-812-1) document the remote overflow and provide fixed package v...