17647 matches found
CVE-2020-11162
CVE-2020-11162 describes a possible buffer overflow in the MHI driver due to missing validation of EOT events in Qualcomm Snapdragon SoCs (OEMs include Snapdragon Auto/Compute/Connectivity etc.). Root cause: lack of input parameter validation on EOT events received from the MHI device side; impac...
sinditurismo.com.br Cross Site Scripting vulnerability OBB-1473191
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Vastaamo psychotherapy data breach sees the most vulnerable victims extorted
“Hell is too nice a place for these people.” Never have we seen outrage about a cybercrime at such a level. The outrage is aimed at cybercriminals behind the data breach that occurred at Finnish psychotherapy practice Vastaamo. Vastaamo, which has treated some 40,000 patients, is a subcontractor ...
[SECURITY] [DLA 2420-1] linux security update
Debian LTS Advisory DLA-2420-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings October 29, 2020 https://wiki.debian.org/LTS Package : linux Version : 4.9.240-1 CVE ID : CVE-2019-9445 CVE-2019-19073 CVE-2019-19074 CVE-2019-19448 CVE-2020-12351 CVE-2020-12352...
basmurano.it Cross Site Scripting vulnerability OBB-1465375
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Lot Reservation Management System 1.0 Cross Site Scripting
Exploit Title: lot reservation management system 1.0 - Stored Cross Site Scripting Date: 2020-10-22 Exploit Author: Ankita Pal Vendor Homepage: https://www.sourcecodester.com/php/14530/lot-reservation-management-system-using-phpmysqli-source-code.html Software Link:...
biker-zones.tarad.com Cross Site Scripting vulnerability OBB-1460058
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
catalogus.kopgroepbibliotheken.nl Cross Site Scripting vulnerability OBB-1458978
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
sbonderdendam.nl Cross Site Scripting vulnerability OBB-1456345
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2019-8771
CVE-2019-8771 affects WebKit/Safari iframe sandboxing. The issue allows maliciously crafted web content to violate iframe sandboxing policy. It is addressed with improved iframe sandbox enforcement and fixed in Safari 13.0.1 and iOS 13. The Apple advisories (HT210606, HT210605) confirm WebKit ifr...
Sphider Search Engine 1.3.6 Remote Code Execution
Exploit Title: Sphider Search Engine 1.3.6 - 'wordupperbound' RCE Authenticated Google Dork: intitle:"Sphider Admin Login" Date: 2014-07-28 Exploit Author: Gurkirat Singh Vendor Homepage: http://www.sphider.eu/ Software Link: http://www.sphider.eu/sphider-1.3.6.zip Version: v1.3.6 Tested on:...
nirapereg.net Cross Site Scripting vulnerability OBB-1453116
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Vastaamo Breach: Hackers Blackmailing Psychotherapy Patients
Cybercriminals have hacked the systems of psychotherapy giant Vastaamo – and are now reaching out to therapy patients, threatening to dump their patient files if they do not pay a ransom. Finland-based Vastaamo, which has more than 40,000 psychotherapy patients, said on its website that its...
info-libro.eu Cross Site Scripting vulnerability OBB-1440611
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
New Report on Police Decryption Capabilities
There is a new report on police decryption capabilities: specifically, mobile device forensic tools MDFTs. Short summary: its not just the FBI that can do it. This report documents the widespread adoption of MDFTs by law enforcement in the United States. Based on 110 public records requests to...
aerospace-bearing.com Cross Site Scripting vulnerability OBB-1439673
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
This Week in Security News: Watering Hole Campaign Operation Earth Kitsune Spying on Users’ Systems and Fancy Bear Imposters Are on a Hacking Extortion Spree
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about a watering hole campaign Trend Micro dubbed ‘Operation Earth Kitsune’ that is spying on users’ systems through compromised...
genussamseeshop.com Cross Site Scripting vulnerability OBB-1439062
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
almullaindustries.com Cross Site Scripting vulnerability OBB-1437500
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
