CVE-2021-35062

The CVE-2021-35062 entry describes a Shell Metacharacter Injection in the file result.php of the DRK Odenwaldkreis Testerfassung March-2021 . The flaw allows an attacker who has a valid COVID-19 test result token to trigger shell commands with the web server’s privileges, indicating a remote comm...

CVE-2021-35062

A Shell Metacharacter Injection vulnerability in result.php in DRK Odenwaldkreis Testerfassung March-2021 allow an attacker with a valid token of a COVID-19 test result to execute shell commands with the permissions of the web server...

CVE-2021-35061

Multiple cross-site scripting XSS vulnerabilities in DRK Odenwaldkreis Testerfassung March-2021 allow remote attackers to inject arbitrary web script or HTML via all parameters to HTML form fields in all components...

drk-tecklenburg.de Cross Site Scripting vulnerability OBB-1253829

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

drk-vaihingen.de XSS vulnerability

Open Bug Bounty ID: OBB-678963 Description| Value ---|--- Affected Website:| drk-vaihingen.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

drk-blutspende.de XSS vulnerability

Vulnerable URL: http://www.drk-blutspende.de/blutspendetermine/blutspendetermin-button-ihre-auswahl.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 477989 VIP website status:| N...

De-randomizing the Kernel ASLR vulnerabilities (DrK )

For details refer to the document: http://www.cc.gatech.edu/%7Eyjang37/assets/papers/2016/jang:drk-ccs.pdf...

Blutspende beim DRK - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Blutspende beim DRK published at the 'play' market has multiple vulnerabilities...

DRK-App - Rotkreuz-App des DRK - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application DRK-App - Rotkreuz-App des DRK published at the 'play' market has multiple vulnerabilities...