5020 matches found
CVE-2019-11657
Micro Focus ArcSight Logger has a Cross-Site Request Forgery (CSRF) vulnerability affecting all product versions prior to 7.0. The vulnerability arises from a web application that does not adequately validate request origins, enabling CSRF attacks without explicit user interaction in some sources...
CVE-2019-17087
Unauthorized file download vulnerability in all supported versions of Micro Focus AcuToWeb. The vulnerability could be exploited to enumerate and download files from the filesystem of the system running AcuToWeb, with the privileges of the account AcuToWeb is running under...
CVE-2019-17087
Unauthorized file download vulnerability in all supported versions of Micro Focus AcuToWeb. The vulnerability could be exploited to enumerate and download files from the filesystem of the system running AcuToWeb, with the privileges of the account AcuToWeb is running under...
Arbitrary file deletion
Unauthorized file download vulnerability in all supported versions of Micro Focus AcuToWeb. The vulnerability could be exploited to enumerate and download files from the filesystem of the system running AcuToWeb, with the privileges of the account AcuToWeb is running under...
CVE-2019-17087
Unauthorized file download vulnerability in all supported versions of Micro Focus AcuToWeb. The vulnerability could be exploited to enumerate and download files from the filesystem of the system running AcuToWeb, with the privileges of the account AcuToWeb is running under...
CVE-2019-17087
The CVE-2019-17087 entry describes an Unauthorized file download vulnerability in all supported versions of Micro Focus AcuToWeb, allowing enumeration/download of filesystem files with AcuToWeb’s running account privileges. The connected documents do not provide concrete technical details (root c...
nudist.focus.tv Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1031686 Security Researcher devl00p Helped patch 2889 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting nudist.focus.tv website...
holiday-flats.focus.tv Cross Site Scripting vulnerability
Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting holiday-flats.focus.tv website and its users. Following...
fossil-museum.focus.tv Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1031162 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
boat-house.focus.tv Cross Site Scripting vulnerability
Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting boat-house.focus.tv website and its users. Following...
bermuda.focus.tv Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1030245 Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting bermuda.focus.tv website...
american.focus.tv Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1029629 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Sale of 4 Million Stolen Cards Tied to Breaches at 4 Restaurant Chains
On Nov. 23, one of the cybercrime underground's largest bazaars for buying and selling stolen payment card data announced the immediate availability of some four million freshly-hacked debit and credit cards. KrebsOnSecurity has learned this latest batch of cards was siphoned from four different...
Micro Focus Operations Agent XXE Vulnerability
Micro Focus Operations Agent helps you monitor your system by collecting metrics that indicate the operational status, performance, resource utilization, and availability of essential elements of your system. A XXE vulnerability exists in Micro Focus Operations Agent, which can be exploited by...
CVE-2019-17085
XXE attack vulnerability on Micro Focus Operations Agent, affected version 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11. The vulnerability could be exploited to do an XXE attack on Operations Agent...
CVE-2019-17085
XXE attack vulnerability on Micro Focus Operations Agent, affected version 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11. The vulnerability could be exploited to do an XXE attack on Operations Agent...
Design/Logic Flaw
XXE attack vulnerability on Micro Focus Operations Agent, affected version 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11. The vulnerability could be exploited to do an XXE attack on Operations Agent...
CVE-2019-17085
The CVE-2019-17085 entry describes an XXE vulnerability in Micro Focus Operations Agent affecting versions 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, and 12.11. The issue is an XXE attack vector within the Operations Agent (vulnerability type: XXE). The connected documents corroborate...
CVE-2019-17085
XXE attack vulnerability on Micro Focus Operations Agent, affected version 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11. The vulnerability could be exploited to do an XXE attack on Operations Agent...
focus-wtv.be Improper Access Control vulnerability
Open Bug Bounty ID: OBB-1011140 Security Researcher geeknik Helped patch 8930 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting focus-wtv.be website and i...