mb-teilekatalog.info XSS vulnerability

Open Bug Bounty ID: OBB-572152 Description| Value ---|--- Affected Website:| mb-teilekatalog.info Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dubai.pe-mb.com XSS vulnerability

Open Bug Bounty ID: OBB-446080 Description| Value ---|--- Affected Website:| dubai.pe-mb.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

mb-trading.ch XSS vulnerability

Open Bug Bounty ID: OBB-299028 Description| Value ---|--- Affected Website:| mb-trading.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mb-racing.ch XSS vulnerability

Vulnerable URL: http://mb-racing.ch/?s=%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:...

PT-2017-19327

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.12 FFmpeg versions 3.0.x prior to 3.0.8 FFmpeg versions 3.1.x prior to 3.1.8 FFmpeg versions 3.2.x prior to 3.2.5 FFmpeg versions 3.3.x prior to 3.3.1 Description The issue allows remote attackers to cause a denial...

PT-2017-9035

Name of the Vulnerable Software and Affected Versions HHVM versions prior to 3.15.0 Description The issue is related to out-of-bounds write in certain functions, specifically mb detect encoding, mb send mail, and mb detect order, which can allow attackers to have an unspecified impact. The exact...

mb-kc.com XSS vulnerability

Open Bug Bounty ID: OBB-211574 Description| Value ---|--- Affected Website:| mb-kc.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

asrock.com XSS vulnerability

Vulnerable URL: http://www.asrock.com/mb/spec/card.asp?Model=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10217 VIP website status:| Yes Check asrock.com SSL connection:| Grade...

Payments MB - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Payments MB published at the 'play' market has multiple vulnerabilities...

php: mb_strcut() Negative size parameter in memcpy

Multiple integer overflows in the mbflstrcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted mbstrcut call...

CVE-2016-3878

decoder/ih264dapi.c in mediaserver in Android 6.x before 2016-09-01 mishandles the case of decoding zero MBs, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 29493002...

Internet Bug Bounty: _php_mb_regex_ereg_replace_exec - double free

phpmbregexeregreplaceexec is prone to double free that can be turned into a code execution. Details about the bug: https://bugs.php.net/bug.php?id=72402 already fixed...

MB WAY - Certificates or keys found, KeyStore usage, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application MB WAY published at the 'play' market has multiple vulnerabilities...

PT-2020-7843

Name of the Vulnerable Software and Affected Versions: GNU Coreutils versions through 8.23 Description: The issue is related to an integer overflow in the keycompare mb function in sort.c, which might allow attackers to cause a denial of service, such as an application crash, or possibly have oth...

PT-2020-7842

Name of the Vulnerable Software and Affected Versions: GNU Coreutils versions through 8.23 Description: The issue arises from a size calculation error in the keycompare mb function, specifically when handling multibyte characters in UTF-8 strings on 64-bit platforms. This error can lead to a deni...

CVE-2014-7772

The MB Tickets aka com.xcr.android.mbtickets application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The MB Tickets aka com.xcr.android.mbtickets application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7772

The MB Tickets aka com.xcr.android.mbtickets application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7772

The MB Tickets Android app (package com.xcr.android.mbtickets) version 3.0.1 is affected by an SSL trust issue: it does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. CVSSv2 base ...

PT-2014-8257

Name of the Vulnerable Software and Affected Versions MB Tickets aka com.xcr.android.mbtickets version 3.0.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates...