M-Files Hubshare 跨站脚本漏洞

M-Files Hubshare is a collaboration solution from M-Files, Inc. designed to seamlessly share files, documents and collaborative content. A security vulnerability exists in M-Files Hubshare versions prior to 3.3.10.9, which stems from incorrect input validation and output encoding of all of its...

PT-2022-24672 · Pdftron Systems +1 · Pdftron +1

Name of the Vulnerable Software and Affected Versions: M-Files Hubshare versions prior to 3.3.10.9 Description: The issue allows authenticated attackers to perform an account takeover via a crafted PDF upload, exploiting a Javascript injection in PDFtron. Recommendations: For versions prior to...

CVE-2021-38728

SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting XSS via AntMCoup.php...

SEMCMS 跨站脚本漏洞

SEMCMS is a multilingual content management system CMS for foreign trade websites. A cross-site scripting vulnerability exists in SEMCMS SHOP version 1.1, which stems from a cross-site scripting issue in AntMCoup.php...

Upgraded Q -> M from 497 [1666363365064]

Judge has assessed an item in Issue 497 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...

m-fire.co.uk Cross Site Scripting vulnerability OBB-2981012

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Upgraded Q -> M from 193 [1665109261242]

Judge has assessed an item in Issue 193 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...

Upgraded Q -> M from 657 [1664812805667]

Judge has assessed an item in Issue 657 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...

Upgraded Q -> M from 357 [1664289665374]

Judge has assessed an item in Issue 357 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...

Upgraded Q -> M from 496 [1663882181323]

Judge has assessed an item in Issue 496 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...

m-nachshon.org Cross Site Scripting vulnerability OBB-2935865

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the `calculate_gain` function in the `libfaad/sbr_hfadj.c` component of the Freeware Advanced Audio Decoder 2 (FAAD2) allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the calculategain function in the libfaad/sbrhfadj.c component of the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related to the lack of comparison with MAXM. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its...

Denial Of Service (DoS)

asterisk is vulnerable to denial of service. The vulnerability exists due to allows an append operation relative to the active topology which allows an attacker to trigger a crash by sending an m=image line and zero port in a response...

CVE-2022-39828

signpFwInfo in Samsung mTower through 0.3.0 has a missing check on the return value of ECKEYsetprivatekey, leading to a denial of service...

CVE-2022-36621

Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEEAllocateTransientObject...

fcor.tamu.edu Cross Site Scripting vulnerability OBB-2880863

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Upgraded Q -> M from 76 [1661962956364]

Judge has assessed an item in Issue 76 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...

CVE-2022-36733

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the MId parameter at /admin/del.php...

hi-sun-m-e.com Cross Site Scripting vulnerability OBB-2866088

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

m.4bo1bt.cyou Cross Site Scripting vulnerability OBB-2863709

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...