392 matches found
North Korean State-Sponsored Hackers Suspected in JumpCloud Supply Chain Attack
An analysis of the indicators of compromise IoCs associated with the JumpCloud hack has uncovered evidence pointing to the involvement of North Korean state-sponsored groups, in a style that's reminiscent of the supply chain attack targeting 3CX. The findings come from SentinelOne, which mapped o...
jade-hs.de Cross Site Scripting vulnerability OBB-3383918
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
trello-octometric SQL注入漏洞
trello-octometric is a small project by the individual developer Jade Bilkey to execute metrics on trello boards over time. trello-octometric suffers from a SQL injection vulnerability that stems from the fact that incorrect manipulation of the parameter num can lead to sql injection...
Fedora: Security Advisory for golang-github-eknkc-amber (FEDORA-2022-ea8f4e232d)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 36 Update: golang-github-eknkc-amber-0-0.18.20190601gitcdade1c.fc36
Amber is an elegant templating engine for Go Programming Language It is inspi red from HAML and Jade...
[SECURITY] Fedora 35 Update: golang-github-eknkc-amber-0-0.17.20190601gitcdade1c.fc35
Amber is an elegant templating engine for Go Programming Language It is inspi red from HAML and Jade...
[SECURITY] Fedora 36 Update: golang-github-eknkc-amber-0-0.17.20190601gitcdade1c.fc36
Amber is an elegant templating engine for Go Programming Language It is inspi red from HAML and Jade...
crystaljade.com Improper Access Control vulnerability OBB-2161582
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
jadeangeljewelry.com Cross Site Scripting vulnerability OBB-1422717
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Clickjacking Vulnerability in Golden Jade Butler App
Jade Butler app is a mobile trading platform launched by Hengtai Securities, the platform has securities quotes, securities trading, account management, securities information and many other features. There is a clickjacking vulnerability in Jade Butler App, which can be exploited by attackers to...
jade.daa.umontreal.ca XSS vulnerability
Open Bug Bounty ID: OBB-608362 Description| Value ---|--- Affected Website:| jade.daa.umontreal.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...