PT-2021-26012

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.249 Description A potential issue exists in the irqchip/gic-v3-its component, which may lead to a VPE leak on error. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-26040

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.209 Description The issue is related to a potential VPE leak on error in the irqchip/gic-v3-its component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2021-26081

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.150 Description The issue is related to a potential VPE leak on error in the irqchip/gic-v3-its component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30076

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.150 Description The issue is related to a potential VPE leak on error in the irqchip/gic-v3-its component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30133

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.70 Description The issue is related to a potential VPE leak on error in the irqchip/gic-v3-its component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2024-11370

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential VPE leak on error has been resolved in the Linux kernel. The issue occurs in the its vpe irq domain alloc function when its vpe init returns an error, causing an off-by-one i...

its-bildung.de Cross Site Scripting vulnerability OBB-1338233

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

cleanlab.com.ar Cross Site Scripting vulnerability OBB-1270475

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

v-os.ca Cross Site Scripting vulnerability OBB-1259041

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

zonnetprovedor.net.br Cross Site Scripting vulnerability OBB-1197853

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

its-recruit.info Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1182098 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

CVE-2020-1622: Improper Control of a Resource Through its Lifetime

A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via the EvoSharedObjStore. This issue affects all versions of Junos OS Evolved prior to 19.1R1...

CVE-2020-1621: Improper Control of a Resource Through its Lifetime

A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces. This issue affects all versions of Junos OS Evolved prior to 19.3R1...

CVE-2020-1620: Improper Control of a Resource Through its Lifetime

A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log. This issue affects all versions of Junos OS Evolved prior to 19.3R1...

its-mo.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1023051 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

CVE-2019-10643

Contao 4.7 allows Use of a Key Past its Expiration Date...

CVE-2019-10643: Improper Authentication

Contao 4.7 allows Use of a Key Past its Expiration Date...

Making Expect scripts for SSH Authentication and Privilege Elevation

Expect can help you to automate interactive console applications. For example, expect script can go to some Linux host via SSH with password authentication, make additional authentication procedures su, sudo to elevate privileges and execute some commands. Like Vulnerability and Compliance...

atec-its-france.com XSS vulnerability

Open Bug Bounty ID: OBB-672128 Description| Value ---|--- Affected Website:| atec-its-france.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross site scripting

SAP Internet Transaction Server ITS 6200.X.X has Reflected Cross Site Scripting XSS via certain wgate URIs. NOTE: the vendor has reportedly indicated that there will not be any further releases of this product...