suche2.karlsruhe.de Cross Site Scripting vulnerability OBB-3873176

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

karlsruhe-erleben.de Cross Site Scripting vulnerability OBB-3225741

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

eiger.alpenverein-karlsruhe.de Cross Site Scripting vulnerability OBB-3210562

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cateringkarlsruhe.de Cross Site Scripting vulnerability OBB-2685056

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

suche2.karlsruhe.de Cross Site Scripting vulnerability OBB-2678100

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

karlsruhe-kfo.de Cross Site Scripting vulnerability OBB-2335310

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

suche2.karlsruhe.de Cross Site Scripting vulnerability OBB-2280822

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

power-radio-karlsruhe.de XSS vulnerability

Open Bug Bounty ID: OBB-596421 Description| Value ---|--- Affected Website:| power-radio-karlsruhe.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

info.uni-karlsruhe.de XSS vulnerability

Vulnerable URL: http://www.info.uni-karlsruhe.de/publications.php/id=159'%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

suche2.karlsruhe.de XSS vulnerability

Vulnerable URL: https://suche2.karlsruhe.de/buergerdienste?q=%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C%2Fscript%3E=subcollection%3AB%C3%BCrgerdienste Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Updated gnupg/libgcrypt packages fix security vulnerability

Felix Doerre and Vladimir Klebanov from the Karlsruhe Institute of Technology discovered a flaw in the mixing functions of GnuPG's random number generator. An attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output CVE-2016-6313. The gnupg package has been...

Debian DSA-3649-1 : gnupg - security update

Felix Doerre and Vladimir Klebanov from the Karlsruhe Institute of Technology discovered a flaw in the mixing functions of GnuPG's random number generator. An attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output. A first analysis on the impact of this bug...

Debian Security Advisory DSA 3650-1 (libgcrypt20 - security update)

Felix Doerre and Vladimir Klebanov from the Karlsruhe Institute of Technology discovered a flaw in the mixing functions of Libgcrypt OpenVAS Vulnerability Test $Id: deb3650.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3650-1 using nvtgen 1.0 Script version: 1.0 Autho...

Joomla Component com_ownbiblio SQL Injection (CVE-2008-6184)

An SQL injection vulnerability has been reported in Medialab-karlsruhe Ownbiblio. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...