m-i.be Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1156249 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting m-i.be website and it...

CVE-2019-19218

BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage...

CVE-2019-19217

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection...

CVE-2019-19217

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection...

CVE-2019-19219

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...

CVE-2019-19215

A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via vectors related to the configured IP address or SMTP server...

CVE-2019-19220

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection issue 2 of 2...

CVE-2019-19215

A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via vectors related to the configured IP address or SMTP server...

CVE-2019-19216

BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy...

CVE-2019-19219

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...

CVE-2019-19218

BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage...

CVE-2019-19220

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection issue 2 of 2...

CVE-2019-19216

BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy...

Arbitrary file deletion

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...

Buffer overflow

A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via vectors related to the configured IP address or SMTP server...

Command injection

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection...

Command injection

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection issue 2 of 2...

Default credentials

BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage...

Design/Logic Flaw

BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy...

CVE-2019-19215

A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via vectors related to the configured IP address or SMTP server...