83 matches found
ww.rizerfireworks.com Cross Site Scripting vulnerability OBB-2846448
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-29500
bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BUILD-SNAPSHOT there is a vulnerability in which the package did not properly verify the signature of JSON Web Tokens. This allows to forgery of valid JWTs...
CVE-2021-29500
The CVE-2021-29500 issue affects the bubble-fireworks project (fxbin/bubble-fireworks) in BUILD-SNAPSHOT builds. The root cause is improper verification of JSON Web Token signatures in the library’s JWT handling, which enables forgery of valid JWTs. Affected component: bubble-fireworks-core/JWT v...
CVE-2021-29500 Missing validation of JWT signature
bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BUILD-SNAPSHOT there is a vulnerability in which the package did not properly verify the signature of JSON Web Tokens. This allows to forgery of valid JWTs...
bubble fireworks 数据伪造问题漏洞
bubble is an application. It is a Bubble Tea TUI component. A security vulnerability exists in previous versions of bubble fireworks 2021.BUILD-SNAPSHOT, which stems from the fxbin/bubble-fireworks package not properly verifying the signature of JSON web tokens, which can be exploited by an...
tringfireworks.co.uk Cross Site Scripting vulnerability OBB-1368774
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Code Execution Vulnerability in SDCMS V1.8
SDCMS is a PHP and MySQL based enterprise station building content management system CMS from China Fireworks Network Technology Company. A code execution vulnerability exists in SDCMS V1.8, which can be exploited by an attacker to gain server privileges...
Logic Flaw Vulnerability in sdcms V1.8
SDCMS is a PHP and MySQL based enterprise station building content management system CMS from China Fireworks Network Technology Company. A logic flaw vulnerability exists in sdcms V1.8, which can be exploited by attackers to obtain sensitive information...
CVE-2019-5014
An exploitable improper access control vulnerability exists in the bluetooth low energy functionality of Winco Fireworks FireFly FW-1007 V2.0. An attacker can connect to the device to trigger this vulnerability...
CVE-2019-5014
An exploitable improper access control vulnerability exists in the bluetooth low energy functionality of Winco Fireworks FireFly FW-1007 V2.0. An attacker can connect to the device to trigger this vulnerability...
Improper access control
An exploitable improper access control vulnerability exists in the bluetooth low energy functionality of Winco Fireworks FireFly FW-1007 V2.0. An attacker can connect to the device to trigger this vulnerability...
CVE-2019-5014
An exploitable improper access control vulnerability exists in the bluetooth low energy functionality of Winco Fireworks FireFly FW-1007 V2.0. An attacker can connect to the device to trigger this vulnerability...
CVE-2019-5014
CVE-2019-5014 concerns the Winco Fireworks FireFly FW-1007 V2.0 Bluetooth Low Energy firmware, where an attacker can connect via BLE without authentication to issue launch commands. The vulnerability stems from improper access control in the BLE interface, allowing an unauthenticated attacker to ...
Winco Fireworks FireFly Bluetooth Low Energy Improper Access Control Vulnerability
Summary An exploitable improper access control vulnerability exists in the bluetooth low energy functionality of Winco Fireworks FireFly FW-1007 V2.0. An attacker can connect to the device to trigger this vulnerability. Tested Versions Winco Fireworks FireFly FW-1007 V2.0 Product URLs...
SDCMS has an xss vulnerability
SDCMS is a PHP and MySQL based enterprise station building content management system CMS from China Fireworks Network Technology Company. An xss vulnerability exists in SDCMS, which can be exploited by an attacker to obtain an administrator cookie...
SQL Injection Vulnerability in SDMCS V1.1 Frontend
SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. SDMCS V1.1 SQL injection vulnerability exists in the front-end, due to the system does not effectively filter the data submitted by the user, the attacker can exploit the vulnerability to obtain sensitiv...
SDCMS Search Box SQL Injection Vulnerability
SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. An SQL injection vulnerability exists in the SDCMS search box. The vulnerability stems from failure to filter user input. An attacker can exploit this vulnerability to obtain sensitive information from t...
Funny Fireworks - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Funny Fireworks published at the 'play' market has multiple vulnerabilities...
Fireworks Piano - Dynamic Code Loading, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Fireworks Piano published at the 'play' market has multiple vulnerabilities...
Toddlers Funny Fireworks - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Toddlers Funny Fireworks published at the 'play' market has multiple vulnerabilities...