94 matches found
Race condition
Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service kernel deadlock...
champagne-jean-pernet.com Cross Site Scripting vulnerability OBB-2966833
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
aluno.colegiojeanpiagetdesantos.com.br Cross Site Scripting vulnerability OBB-2815804
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
meterN 1.2.3 Remote Command Execution
!-- meterN v1.2.3 Authenticated Remote Command Execution Vulnerability Vendor: Jean-Marc Louviaux Product web page: https://www.metern.org Affected version: 1.2.3 and 0.8.3.2 Summary: meterN is a set of PHP/JS files that make a -Home energy metering & monitoring- solution. It accept any meters li...
meterN v1.2.3 - Remote Code Execution (RCE) (Authenticated)
Exploit Title: meterN v1.2.3 - Remote Code Execution RCE Authenticated Date: 18/11/2021 Exploit Author: LiquidWorm Vendor Homepage: https://www.metern.org !-- meterN v1.2.3 Authenticated Remote Command Execution Vulnerability Vendor: Jean-Marc Louviaux Product web page: https://www.metern.org...
saint-jean-en-royans.fr Cross Site Scripting vulnerability OBB-2293384
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CEO of Encrypted Chat Platform Indicted for Aiding Organised Criminals
The U.S. Department of Justice DoJ on Friday announced an indictment against Jean-Francois Eap, the CEO of encrypted messaging company Sky Global, and an associate for wilfully participating in a criminal enterprise to help international drug traffickers avoid law enforcement. Eap also known as...
saint-jean-des-bois.fr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1173833 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
dr-salama-jean-pierre.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1148299 Security Researcher cvesh Helped patch 9 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting dr-salama-jean-pierre.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines o...
jean-station.fr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1127172 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting jean-station.fr website a...
French Police Remotely Removed RETADUP Malware from 850,000 Infected PCs
The French law enforcement agency, National Gendarmerie, today announced the successful takedown of one of the largest wide-spread RETADUP botnet malware and how it remotely disinfected more than 850,000 computers worldwide with the help of researchers. Earlier this year, security researchers at...
jean-christophe.huant.fr XSS vulnerability
Open Bug Bounty ID: OBB-684220 Description| Value ---|--- Affected Website:| jean-christophe.huant.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...
st-jean-colmar.fr XSS vulnerability
Open Bug Bounty ID: OBB-601948 Description| Value ---|--- Affected Website:| st-jean-colmar.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
motoculture-jean.fr XSS vulnerability
Open Bug Bounty ID: OBB-572602 Description| Value ---|--- Affected Website:| motoculture-jean.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
saint-jean-eudes.com XSS vulnerability
Open Bug Bounty ID: OBB-554772 Description| Value ---|--- Affected Website:| saint-jean-eudes.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
LaZagneForensic - Decrypt Windows Credentials From Another Host
LaZagne uses an internal Windows API called CryptUnprotectData to decrypt user passwords. This API should be called on the victim user session, otherwise, it does not work. If the computer has not been started when the analysis is realized on an offline mounted disk, or if we do not want to drop ...
stjean.org XSS vulnerability
Vulnerable URL: http://www.stjean.org/apps/news/shownews.jsp?RECID=461679=0=News%20Post%20Summer%20Reading%20List%20-%20St.%20Jean%20Baptiste%20High%20School%3C/title%3E%3Csvg/onload=alert/XSSPOSED/%3E=true Details: Description| Value ---|--- Patched:| Yes, at 15.10.2017 Latest check for patch:|...
Commerce invoices - Highly Critical - SQL Injection and Cross Site scripting - DRUPAL-SA-CONTRIB-2017-070
Commerce Invoices allows you to enter an Invoice number, Company name and Amount and it will generate an Invoice that the client can pay on your site using any payment method supported by Drupal commerce. SQL Injection The module did not properly use Drupal's database API when querying the databa...
Report: Second quarter dominated by ransomware outbreaks
The second quarter of 2017 brought ransomware to unprecedented levels with worldwide outbreaks that went almost out of control. In scenarios reminiscent of yesteryears worms, WannaCry created global panic as it used a critical vulnerability in the SMBv1 protocol to propagate like wildfire. Within...
jean-jaures.ent27.fr XSS vulnerability
Vulnerable URL: http://jean-jaures.ent27.fr/sg.do Details: Description| Value ---|--- Patched:| Yes, at 02.03.2017 Latest check for patch:| 02.03.2017 12:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 182427 VIP website status:| No Coordinated Disclosure...