634 matches found
osh.com XSS vulnerability
Open Bug Bounty ID: OBB-404766 Description| Value ---|--- Affected Website:| osh.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
lmvn.com XSS vulnerability
Vulnerable URL: http://lmvn.com/weblink/index.php?func=goto=13'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 444510 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...
ggstory.com XSS vulnerability
Vulnerable URL: http://ggstory.com/shop/search.php?q=13'"105 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2778815 VIP website status:| No Coordinated Disclosure Timeline:...
elyan-dryer.com XSS vulnerability
Vulnerable URL: http://www.elyan-dryer.com/index.php?a=search=13'"220.ro=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinat...
microtechinno.com XSS vulnerability
Vulnerable URL: http://www.microtechinno.com/product/detail.php?id=13'"34 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16457321 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|-...
okb.at XSS vulnerability
Vulnerable URL: http://www.okb.at/bv/kontakt/formular.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1018389 VIP website status:| No Coordinated Disclosure Timeline:...
Extending the Microsoft Office Bounty Program
Microsoft announces the extension of the Microsoft Office Bounty Program through December 31, 2017. This extension is retroactive for any cases submitted during the interim. The engagement we have had with the security community has been great and we are looking to continue that collaboration on...
EMC CMCNE 11.2.1 Inmservlets.war FileUploadController Remote Code Execution
require 'msf/core' class MetasploitModule 'EMC CMCNE Inmservlets.war FileUploadController Remote Code Execution', 'Description' = %q This module exploits a file upload vulnerability found in EMC Connectrix Manager Converged Network Edition 'james fitts' , 'License' = MSFLICENSE, 'References' =...
Fatek Automation PLC WinProladder 3.11 Build 14701 - Stack Buffer Overflow (Metasploit)
Fatek Automation PLC WinProladder 3.11 Build 14701 - Stack Buffer Overflow Metasploit require 'msf/core' class MetasploitModule 'Fatek Automation PLC WinProladder Stack-based Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in Fatek Automation PLC...
ZScada Modbus Buffer 2.0 - Stack Buffer Overflow (Metasploit)
ZScada Modbus Buffer 2.0 - Stack Buffer Overflow Metasploit require 'msf/core' class MetasploitModule 'ZScada Net Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in Z-Scada Net 2.0. The vulnerability is triggered when parsing the response to a Modbus...
visitsweden.com XSS vulnerability
Vulnerable URL: https://visitsweden.com/explore/?q=%22%3E%3Cscript%3Ealert%28%2FOPENBUGBOUNTY%2F%29%3B%3C%2Fscript%3E++ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 248196 VIP...
doe.gov.np Open Redirect vulnerability
Vulnerable URL: http://doe.gov.np/site/language/swapLang/1/?redirect=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 462085 VIP website...
PT-2017-4091 · Jbig2Dec +2 · Jbig2Dec +2
Name of the Vulnerable Software and Affected Versions: jbig2dec version 0.13 Description: The issue is related to a NULL pointer dereference in the jbig2 huffman get function in jbig2 huffman.c. This can cause a crash, such as a segmentation fault, when parsing an invalid file. For example, the...
CVE-2016-9469
Multiple versions of GitLab expose a dangerous method to any authenticated user that could lead to the deletion of all Issue and MergeRequest objects on a GitLab instance. For GitLab instances with publicly available projects this vulnerability could be exploited by an unauthenticated user. A fix...
UBUNTU-CVE-2016-9388
The rasgetcmap function in rasdec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service assertion failure via a crafted image file...
PT-2017-10105 · Jasper +4 · Jasper +4
Name of the Vulnerable Software and Affected Versions: JasPer versions prior to 1.900.14 Description: The issue allows remote attackers to cause a denial of service via a crafted image file. This is due to a problem in the ras getcmap function in ras dec.c. Recommendations: For versions prior to...
JasPer integer overflow vulnerability (CNVD-2017-03801)
JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. An integer overflow vulnerability exists in the jpcdectiledecode function in the jpcdec.c file in versions of JasPer prior to 1.900.12. A remote attacker could exploit this...
UBUNTU-CVE-2016-8691
The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted XRsiz value in a BMP image to the imginfo command...
DiskBoss Enterprise - GET Buffer Overflow (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'DiskBoss Enterprise GET Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow vulnerability i...