CVE-2023-44981

Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper. If SASL Quorum Peer authentication is enabled in ZooKeeper quorum.auth.enableSasl=true, the authorization is done by verifying that the instance part in SASL authentication ID is listed in zoo.cfg server list. The...

ensembletravel.ca Cross Site Scripting vulnerability OBB-3040434

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ensemble-mosaik.de Improper Access Control vulnerability OBB-2394069

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PYSEC-2021-565

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for tf.rawops.BoostedTreesCreateEnsemble can result in a use after free error if an attacker supplies specially crafted arguments. The implementation uses a reference counted resource an...

PYSEC-2021-763

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for tf.rawops.BoostedTreesCreateEnsemble can result in a use after free error if an attacker supplies specially crafted arguments. The implementation uses a reference counted resource an...

CVE-2021-37652

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for tf.rawops.BoostedTreesCreateEnsemble can result in a use after free error if an attacker supplies specially crafted arguments. The implementation uses a reference counted resource an...

Microsoft announces new Project OneFuzz framework, an open source developer tool to find and fix bugs at scale

Microsoft is dedicated to working with the community and our customers to continuously improve and tune our platform and products to help defend against the dynamic and sophisticated threat landscape. Earlier this year, we announced that we would replace the existing software testing experience...

ensembletravel.ca Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1132669 Security Researcher KhanJanny Helped patch 3065 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting ensembletravel.ca websit...

Aerotech Ensemble Stand-Alone Multi-Axis Controller Motion Module Detection

Binary data 763903.prm...

Aerotech Ensemble QLAB Motion Module Detection

Binary data 763922.prm...

Aerotech Ensemble QDe Servo Drives Detection

Binary data 763923.prm...

Aerotech Ensemble ML Servo Drives Detection

Binary data 763918.prm...

Aerotech Ensemble Epaq MR PLC Detection

Binary data 763913.prm...

Aerotech Ensemble HLe Servo Drives Detection

Binary data 763917.prm...

Aerotech Ensemble MP Servo Drives Detection

Binary data 763911.prm...

Aerotech Ensemble LAB Motion Module Detection

Binary data 763924.prm...

Aerotech Ensemble Epaq PLC Detection

Binary data 763912.prm...

Aerotech Ensemble CP Servo Drives Detection

Binary data 763910.prm...

Aerotech Ensemble QL/QLe Servo Drives Detection

Binary data 763921.prm...

ensemblemusic.com.sg XSS vulnerability

Open Bug Bounty ID: OBB-664521 Description| Value ---|--- Affected Website:| ensemblemusic.com.sg Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...