143 matches found
guru-pon.jp Cross Site Scripting vulnerability OBB-2153250
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
mahavidyayoga.secure.retreat.guru Cross Site Scripting vulnerability OBB-1341313
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
ayahuascachurches.secure.retreat.guru Cross Site Scripting vulnerability OBB-1341304
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
benedictinecenter.secure.retreat.guru Cross Site Scripting vulnerability OBB-1341305
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
base64.guru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1115245 Security Researcher SkypLabs Helped patch 16 vulnerabilities Received 1 Coordinated Disclosure badges Received 2 recommendations , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting base64.guru website and its...
Online Course Registration 2.0 - Remote Code Execution Exploit
Exploit for php platform in category web applications Exploit Title: Online Course Registration 2.0 - Remote Code Execution Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/online-course-registration-free-download/ Version: v2.0...
Deserialization of untrusted data
The Carts Guru plugin 1.4.5 for WordPress allows Insecure Deserialization via a cartsguru-source cookie to classes/wc-cartsguru-event-handler.php...
CVE-2019-12241
The Carts Guru plugin 1.4.5 for WordPress allows Insecure Deserialization via a cartsguru-source cookie to classes/wc-cartsguru-event-handler.php...
CVE-2019-12241
CVE-2019-12241 affects the Carts Guru WordPress plugin up to version 1.4.5. The Red Hat and NVD records confirm an insecure deserialization flaw triggered by a cartsguru-source cookie that targets classes/wc-cartsguru-event-handler.php, enabling unauthenticated access with high impact. CVSS3 base...
WordPress Carts Guru plugin deserialization vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Carts Guru plugin is an e-commerce plugin used in it. A security vulnerability exists in version 1.4.5 of the WordPress Carts Guru...
Carts Guru <= 1.4.4 - Unauthenticated Object Injection
The Carts Guru WordPress plugin was affected by an Unauthenticated Object Injection security vulnerability...
CVE-2018-19320
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system...
Information disclosure
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system...
CVE-2018-19321
The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate...
CVE-2018-19323
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers MSRs...
Code injection
The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate...
CVE-2018-19323
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers MSRs...
CVE-2018-19321
CVE-2018-19321 affects GIGABYTE GPCIDrv and GDrv low-level drivers in APP Center (and related tools) that expose functionality to read/write arbitrary physical memory. The root cause is insufficient input control in the drivers, enabling a local attacker to elevate privileges. Affected products/v...
CVE-2018-19323
CVE-2018-19323 affects the GDrv low-level driver in GIGABYTE APP Center (and related tools: AORUS GRAPHICS ENGINE <1.57, XTREME GAMING ENGINE <1.26, OC GURU II
CVE-2018-19320
CVE-2018-19320 concerns the GDrv low-level driver used by GIGABYTE APP Center and related tools (AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, OC GURU II v2.08). The vulnerability exposes ring0 memcpy-like functionality that could let a local attacker gain full control of t...