1228 matches found
k-records.be Cross Site Scripting vulnerability OBB-1400174
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
k-admin.co.kr Cross Site Scripting vulnerability OBB-1398654
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
k-records.be Cross Site Scripting vulnerability OBB-1392351
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
k-admin.co.kr Cross Site Scripting vulnerability OBB-1390690
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
k-otc38.co.kr Cross Site Scripting vulnerability OBB-1354088
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
k-spc.co.kr Cross Site Scripting vulnerability OBB-1340146
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Pakistani power supplier K-Electric hit by NetWalker ransomware attack
By Deeba Ahmed K-Electric suffered a targeted ransomware attack by NetWalker ransomware operators that affected its billing and online services. This is a post from HackRead.com Read the original post: Pakistani power supplier K-Electric hit by NetWalker ransomware attack...
search.mamoru-k.com Cross Site Scripting vulnerability OBB-1309057
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
search.mamoru-k.com Cross Site Scripting vulnerability OBB-1299659
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Vulnerability Spotlight: Multiple SQL, code injection vulnerabilities in OpenSIS
Yuri Kramarz and Yves Younan discovered these vulnerabilities. Blog by Jon Munshaw Cisco Talos researchers recently discovered multiple vulnerabilities in the OpenSIS software family. OpenSIS is a student information management system for K-12 students. It is available in commercial and open-sour...
ratanovi-komplekti-za-tereasa-k.123plochki.com Cross Site Scripting vulnerability OBB-1282834
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
WordPress Click to Top plugin <= 1.2.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability found by Melbin K Matthew in WordPress Click to Top plugin versions = 1.2.5. Solution Update the WordPress Click to Top plugin to the latest available version at least 1.2.8...
WordPress Easy Media Download plugin <= 1.1.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Melbin K Mathew in WordPress Easy Media Download plugin versions = 1.1.4. Solution Update the WordPress Easy Media Download plugin to the latest available version at least 1.1.5...
WordPress Responsive Lightbox2 plugin <= 1.0.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability found Melbin K Mathew in WordPress Responsive Lightbox2 plugin versions = 1.0.2. Solution Update the WordPress Responsive Lightbox2 plugin to the latest available version at least 1.0.3...
WordPress Sell Photo plugin <= 1.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability found by Melbin K Mathew in WordPress Sell Photo plugin versions = 1.0.5. Solution 2021-01-06 - we were unable to find a patched version of this plugin. Notification from WordPress.org - "This plugin has been closed as of August 17, 2020...
WordPress Responsive Lightbox2 1.0.2 Cross Site Scripting
Exploit Title: WordPress Responsive Lightbox2 Plugin v1.0.2 - Persistent Cross-Site Scripting Date: 2020-08-14 Vendor Homepage: https://noorsplugin.com/ Vendor Changelog: https://wordpress.org/plugins/responsive-lightbox2/developers Exploit Author: Melbin K Mathew @melbinkm Author Advisory:...
WordPress NextGEN Gallery Sell Photo plugin <= 1.0.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability found by Melbin K Mathew in WordPress NextGEN Gallery Sell Photo plugin versions = 1.0.4. Solution 2021-01-06 - we were unable to find a patched version of this plugin. Notification from WordPress.org - "This plugin has been closed as of...
WordPress WP fancybox plugin <= 1.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability found by Melbin K Mathew in WordPress WP fancybox plugin versions = 1.0.1. Solution Update the WordPress WP fancybox plugin to the latest available version at least 1.0.2...
Raonwiz K Upload Injection Vulnerability
Raonwiz K Upload is a file transfer component from the Korean company Raonwiz. A security vulnerability exists in Raonwiz K Upload 2018.0.2.50 and earlier versions that stems from a lack of validation of file extensions. An attacker can exploit the vulnerability to download and execute files...
RHEL 7 : kdelibs (RHSA-2020:2833)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2833 advisory. The K Desktop Environment KDE is a graphical desktop environment for the X Window System. The kdelibs packages include core libraries for the K Deskt...