zdarma-mp3-ke-stazeni.cz Cross Site Scripting vulnerability OBB-3348220

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ke-yo.co.jp Cross Site Scripting vulnerability OBB-2813573

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security update for chrony (moderate)

openSUSE Security Update: Security update for chrony Announcement ID: openSUSE-SU-2022:0845-1 Rating: moderate References: 1099272 1115529 1128846 1162964 1172113 1173277 1174075 1174911 1180689 1181826 1187906 1190926 1194229 SLE-17334 Cross-References: CVE-2020-14367 CVSS scores: CVE-2020-14367...

SUSE: Security Advisory (SUSE-SU-2021:4147-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SQL Injection Vulnerability in Ke Rong AIO Management System of Shenzhen Ke Rong Software Co.(CNVD-2020-59806)

Ke Rong AIO Management System is an enterprise management system developed by Ke Rong AIO Enterprises, which solves the personalized problems of upstream and downstream, cross-departmental, multi-functional, and changing needs of many enterprise customers in the process of informatization through...

SQL Injection Vulnerability in Ke Rong AIO Management System of Shenzhen Ke Rong Software Co.

Ke Rong AIO Management System is an enterprise management system developed by Ke Rong AIO Enterprises, which solves the personalized problems of upstream and downstream, cross-departmental, multi-functional, and changing needs of many enterprise customers in the process of informatization through...

CVE-2020-15517

The kesearch aka Faceted Search extension through 2.8.2, and 3.x through 3.1.3, for TYPO3 allows XSS...

SQL Injection Vulnerability in CRM Customer Management System ke***.php Page

The HelpManager CRM customer management system is a general-purpose customer relationship management system for small and medium-sized enterprises. A SQL injection vulnerability exists in the ke.php page of the CRM customer management system. An attacker can exploit the vulnerability to obtain...

U.S. Charges 4 Chinese Military Officers in 2017 Equifax Hack

The U.S. Justice Department today unsealed indictments against four Chinese officers of the People's Liberation Army PLA accused of perpetrating the 2017 hack against consumer credit bureau Equifax that led to the theft of personal data on nearly 150 million Americans. DOJ officials said the four...

Mobatek MobaXterm v11.1 - Code Execution Vulnerability

Document Title: =============== Mobatek MobaXterm v11.1 - Code Execution Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2186 Video: https://www.youtube.com/watch?v=Oz0rCBuRKrY Refernces:...

Rockwell Automation 1747-KE/B Speciality I/O

Binary data 754047.prm...

Rockwell Automation 1747-KE/A Speciality I/O

Binary data 754048.prm...

ke-next.de XSS vulnerability

Open Bug Bounty ID: OBB-440925 Description| Value ---|--- Affected Website:| ke-next.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Debian DSA-3985-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2017-5111 Luat Nguyen discovered a use-after-free issue in the pdfium library. - CVE-2017-5112 Tobias Klein discovered a buffer overflow issue in the webgl library. - CVE-2017-5113 A buffer overflow issue was discover...

OpenJPEG - 'mqc.c' Heap Buffer Overflow

DESCRIPTION An Out-of-Bounds Write issue can be occurred in function opjmqcbyteout of mqc.c during executing opjcompress. This issue was caused by a malformed BMP file. CREDIT This vulnerability was discovered by Ke Liu of Tencent's Xuanwu LAB. TESTED VERSION Master version of OpenJPEG 805972f,...

Ubuntu: Security Advisory (USN-3117-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Internet Bug Bounty: CVE-2016-3182 OpenJPEG color_esycc_to_rgb Out-of-Bounds Read Vulnerability

CVE-2016-3182 OpenJPEG coloresycctorgb Out-of-Bounds Read Vulnerability 1. About OpenJPEG OpenJPEG is an open-source JPEG 2000 codec written in C language. It's widely used in lots of Linux OSes such as Ubuntu, RedHat, Debian, Fedora, and so on. The official repository of the OpenJPEG project is...

Internet Bug Bounty: CVE-2016-7163 OpenJPEG opj_pi_create_decode Integer Overflow Vulnerability

OpenJPEG opjpicreatedecode Integer Overflow Vulnerability 1. About OpenJPEG OpenJPEG is an open-source JPEG 2000 codec written in C language. It's widely used in lots of Linux OSes such as Ubuntu, RedHat, Debian, Fedora, and so on. The official repository of the OpenJPEG project is available at...

Debian Security Advisory DSA 3645-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-5139 GiWan Go discovered a use-after-free issue in the pdfium library. CVE-2016-5140 Ke Liu discovered a use-after-free issue in the pdfium library. CVE-2016-5141 Sergey Glazunov discovered a URL spoofing issue...

CVE-2015-3240

The pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with NSS, allows remote attackers to cause a denial of service assertion failure and daemon restart via a zero DH g^x value in a KE payload in a IKE packet...