CVE-2026-89251 AVideo Missing Authorization via AD_Server log.php Wallet Credit

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ad impressions in plugin/ADServer/log.php, allowing logged-in users to submit arbitrary label values that trigger unverified wallet credits to campaign video owners. Attackers can repeatedly POST label=start requests...

CVE-2026-33685

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the plugin/ADServer/reports.json.php endpoint performs no authentication or authorization checks, allowing any unauthenticated attacker to extract ad campaign analytics data including video titles, user channel...

CVE-2019-1010316

pyxtrlock 0.3 and earlier is affected by: Incorrect Access Control. The impact is: False locking impression when run in a non-X11 session. The fixed version is: 0.4...

dark-impression.de Improper Access Control vulnerability OBB-3774727

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-4126: Undefined Security Weakness

When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added by a mailing list gateway, Thunderbird only considered the inner signed message for the signature validity. This gave the false impression that the addition...

XSS Vulnerability in Impression Notes Windows Client

Impression Notes is an excellent electronic notes data management software. An XSS vulnerability exists in the Impression Notes Windows client, which can be exploited by an attacker to obtain user cookie information...

Out of My Depth (Where I Belong)

I remember well my first day as a member of Akamai's InfoSec department. The Friday prior, I'd just completed the Akamai Technical Academy, a five-month crash-course in all things tech, and was now, on a cold but sunny Monday morning, joining InfoSec for their weekly staff meeting. Eager to make ...

Impression Notes (Windows client) suffers from a dll hijacking vulnerability

Impression Notes is an office software with real-time search, tag categorization, support for large databases and other features that allows you to access your notes, record information, find materials and more anytime, anywhere. A dll hijacking vulnerability exists in Impression Notes Windows...

Apple Claims Google is Spreading FUD Over Patched iPhone Bugs

Apple has called out Google for promoting a “false impression” about iOS vulnerabilities the iPhone maker said it fixed in February. It claims Google is unnecessarily panicking Apple customers. On Aug. 29, Ian Beer of Google’s Project Zero published a blog post that took a “very deep dive” into 1...

CVE-2019-1010316

pyxtrlock 0.3 and earlier is affected by: Incorrect Access Control. The impact is: False locking impression when run in a non-X11 session. The fixed version is: 0.4...

CVE-2019-1010316

pyxtrlock 0.3 and earlier is affected by: Incorrect Access Control. The impact is: False locking impression when run in a non-X11 session. The fixed version is: 0.4...

CVE-2019-1010316

pyxtrlock 0.3 and earlier is affected by: Incorrect Access Control. The impact is: False locking impression when run in a non-X11 session. The fixed version is: 0.4...

CVE-2019-1010316

CVE-2019-1010316 affects pyxtrlock versions ≤ 0.3 and earlier. The issue is an Incorrect Access Control that yields a false locking impression when run in a non-X11 session. The fix is in version 0.4 . No exploitation details are provided in the connected documents.

CVE-2019-1010316: Improper Access Control

pyxtrlock 0.3 and earlier is affected by: Incorrect Access Control. The impact is: False locking impression when run in a non-X11 session. The fixed version is: 0.4...

PT-2019-11565

Name of the Vulnerable Software and Affected Versions: pyxtrlock versions 0.3 and earlier Description: The issue is related to Incorrect Access Control, which can lead to a False locking impression when run in a non-X11 session. Recommendations: For versions 0.3 and earlier, update to version 0.4...

impression-catalog.ro XSS vulnerability

Open Bug Bounty ID: OBB-718329 Description| Value ---|--- Affected Website:| impression-catalog.ro Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Impression Notes has an information leakage vulnerability

Impression Notes is a versatile note-taking application. An information disclosure vulnerability exists in Impression Notes. The vulnerability stems from the program failing to encrypt its own database after turning on a password lock, which can be exploited by attackers to obtain sensitive...

PT-2018-4407

Name of the Vulnerable Software and Affected Versions IAB OpenRTB version 2.3 Description The issue concerns the Interactive Advertising Bureau IAB OpenRTB 2.3 protocol implementation, which might allow remote attackers to conceal the status of ad transactions and potentially compromise bid...

fad-seripub.com XSS vulnerability

Open Bug Bounty ID: OBB-626628 Description| Value ---|--- Affected Website:| fad-seripub.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

verkehrsinformation.de XSS vulnerability

Vulnerable URL: http://www.verkehrsinformation.de/?tmp=impressum%22%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 94971 Google...