3624 matches found
dezzain.com Cross Site Scripting vulnerability OBB-1302171
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-13379
creationtimestamp| type| source ---|---|--- 2020-08-01 19:07:21+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/4526 2020-08-03 04:31:10+00:00| published-proof-of-concept| https://t.me/cKure/1649 2020-09-09 06:35:17+00:00| published-proof-of-concept|...
CVE-2020-8193
creationtimestamp| type| source ---|---|--- 2020-07-11 15:39:26+00:00| published-proof-of-concept| Telegram/HFcMUewjNmGZHFQM6L589-YD7TF0J3Yls8VWINDjwu9WQ 2020-07-16 10:00:46+00:00| published-proof-of-concept| https://t.me/misteam/169 2020-07-16 16:04:38+00:00| published-proof-of-concept|...
Jinan Speed Information Technology Co., Ltd. building system there are logical flaws vulnerabilities
Jinan Speed Information Technology Co., Ltd. was established in March 2010, the main business includes computer software development; computer graphic design; website construction and so on. Ltd. There is a logic flaw vulnerability in the website building system, which can be exploited by an...
DEBIAN-CVE-2020-8617
Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows or successfully guesses the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration doe...
Chopslider <= 3.4 - Unauthenticated Blind SQL Injection
The id parameter of the getscript/index.php page is not sanitised when used in a SQL statement, leading to an unauthenticated blind SQL Injection issue. Vendor was contacted by researcher, on March 3rd, 2020 but no reply was received. PoC The PoC will be displayed once the issue has been remediat...
Description of the cumulative update for Office Communications Server 2007 R2, Web Conferencing Server: March, 2011
Discusses the issues that are fixed in the March 2011 cumulative update for Office Communications Server 2007 R2, Web Conferencing Server.SummaryThis article describes the issues that is fixed in the update package for Microsoft Office Communications Server 2007 R2, Web Conferencing Server that i...
Description of the update package for Communications Server 2007 R2, Web Components: March, 2011
Describes a bug that is resolved in the update package for Office Communications Server 2007 R2, Web Components that is dated March 2011.SummaryThis article describes the issue that is fixed in the update package for Microsoft Office Communications Server 2007 R2, Web Components that is dated...
CVE-2020-5847
creationtimestamp| type| source ---|---|--- 2020-04-16 22:27:58+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/unraidauthbypassexec.rb 2020-04-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48353 2021-11-08 08:58:20+00:00|...
How to transform your revolutionary idea into a reality: $100K Nokia Bell Labs Prize
Revolutionary ideas in science, technology, engineering, and mathematics don't occur every day. But when those "eureka" moments happen, we need to provide a forum to explore those ideas, judge them on their merits, and distinguish the extraordinary from the merely good. Once a year, Nokia Bell La...
MS15-022: Description of the security update for the 2007 Microsoft Office system: March 10, 2015
Describes a security update that resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file.IntroductionThis security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if an...
MS15-022: Description of the security update for Excel Services in SharePoint Server 2013: March 10, 2015
Describes a security update that addresses vulnerabilities by correcting how SharePoint Server sanitizes specially crafted page content.INTRODUCTIONMicrosoft has released security bulletin MS15-022. To view the complete security bulletin, go to one of the following Microsoft websites: Home...
MS15-022: Description of the security update for Microsoft Excel 2007 Service Pack 3: March 10, 2015
Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file.IntroductionThis security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if an attacker convinces a user to open or previ...
MS13-003: Vulnerabilities in System Center Operations Manager could allow elevation of privilege: March 12, 2013
Resolves vulnerabilities in Microsoft System Center Operations Manager that could allow elevation of privilege if a user visits an affected website by way of a specially crafted URL.INTRODUCTIONMicrosoft has released security bulletin MS13-003. To view the complete security bulletin, visit the...
MS13-023: Description of the security update for Office 2010 Filter Pack Service Pack 1: March 12, 2013
MS13-023: Description of the security update for Office 2010 Filter Pack Service Pack 1: March 12, 2013 Introduction Microsoft has released security bulletin MS13-023. To view the complete security bulletin, go to one of the following Microsoft websites: Home users:...
March 2016 update for Windows Server 2012 R2 clusters to fix several issues
March 2016 update for Windows Server 2012 R2 clusters to fix several issues This article describes issues in which Data Protection Manager DPM filter driver can't track changes on Cluster Shared Volumes CSV or virtual machine VM configuration resource online fails due to invalid resource state in...
March 28, 2017, update for Excel 2010 (KB3191855)
March 28, 2017, update for Excel 2010 KB3191855 This article describes update KB3191855 for Microsoft Excel 2010, which was released on March 28, 2017. This update has a prerequisite. Improvements and fixes Fixes an issue that causes Excel 2010 to crash when spreadsheets are recalculated. This...
CVE-2018-21079
An issue was discovered on Samsung mobile devices with L5.x, M6.0, N7.x, and O8.0 software. There is a kernel pointer leak in the USB gadget driver. The Samsung ID is SVE-2017-10993 March 2018...
CVE-2018-21081
An issue was discovered on Samsung mobile devices with N7.x software. In Dual Messenger, the second app can use the runtime permissions of the first app without a user's consent. The Samsung ID is SVE-2017-11018 March 2018...
Code injection
An issue was discovered on Samsung mobile devices with S3KK, Note2KK, S4L, Note3L, and S5L software. An attacker can rewrite the IMEI by flashing crafted firmware. The Samsung ID is SVE-2016-5562 March 2016...