106 matches found
f5.dk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1040602 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Race condition
A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7, SIMATIC S7-400 CPU 414F-3 PN/DP V7, SIMATIC S7-400 CPU 416-3 PN/DP V7, SIMATIC S7-400 CPU 416F-3 PN/DP V7, Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits for PROFIN...
dk.theoilandgasjob.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-972837 Security Researcher garletmarco Helped patch 1540 vulnerabilities Received 4 Coordinated Disclosure badges , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting dk.theoilandgasjob.com website and its users...
er4.dk Cross Site Scripting vulnerability
Security Researcher bill Helped patch 52 vulnerabilities Received 2 Coordinated Disclosure badges Received 2 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting er4.dk website and its users. Following coordinated and...
Siemens Multiple Devices Profinet DCP Denial of Service
Binary data 720111.prm...
netbutik.fdm.dk XSS vulnerability
Open Bug Bounty ID: OBB-656876 Description| Value ---|--- Affected Website:| netbutik.fdm.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
kampmann-dk.dk XSS vulnerability
Open Bug Bounty ID: OBB-645239 Description| Value ---|--- Affected Website:| kampmann-dk.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
med24.dk XSS vulnerability
Open Bug Bounty ID: OBB-616173 Description| Value ---|--- Affected Website:| med24.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
hoejlund65-91.dk XSS vulnerability
Open Bug Bounty ID: OBB-550898 Description| Value ---|--- Affected Website:| hoejlund65-91.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
med24.dk XSS vulnerability
Open Bug Bounty ID: OBB-550185 Description| Value ---|--- Affected Website:| med24.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
s48.dk XSS vulnerability
Open Bug Bounty ID: OBB-472748 Description| Value ---|--- Affected Website:| s48.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
club300.dk XSS vulnerability
Vulnerable URL: http://www.club300.dk/articles.php?ua=show%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E=84 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1599435 VIP website...
kolding24.dk Open Redirect vulnerability
Vulnerable URL: http://kolding24.dk/?adsclick=1=564-563-561-560-2=051cf92431=http%3A%2F%2Fopenbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 21:18 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed...
kino1-2.dk XSS vulnerability
Vulnerable URL: http://www.kino1-2.dk/sites/all/modules/cinema/cinema/show-movie-trailer.php?id=191826683"';--=820=470=true Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...
bio12345.dk XSS vulnerability
Vulnerable URL: http://www.bio12345.dk/sites/all/modules/cinema/cinema/show-movie-trailer.php?id=223136269"';--=820=470=true Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4348277...
Siemens devices using the PROFINET Discovery and Configuration Protocol (Update F)
CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit. Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Denial of Service UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory...
Siemens PROFINET DCP (Update V)
1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION : Exploitable from an adjacent network/low attack complexity Vendor : Siemens Equipment : Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerabilities : Uncontrolled Resource Consumption 2. UPDATE INFORMATION This updated advisory...
spar30.dk XSS vulnerability
Vulnerable URL: http://www.spar30.dk/soegTilbud.php?show=konkretsoegning=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 238616...
cam4.dk XSS vulnerability
Vulnerable URL: http://www.cam4.dk/paygate?contextual=gifts-female"=ppgi=en=296857270=basic=basic-noprice=5=1=true Details: Description| Value ---|--- Patched:| Yes, at 25.11.2015 Latest check for patch:| 25.11.2015 09:03 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...
CVE-2014-6827
The DK ONLINE Beta aka com.sgmobile.dkonline application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...