98 matches found
servicos.betim.mg.gov.br Cross Site Scripting vulnerability OBB-1360564
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
gdg-mg-ost.de Cross Site Scripting vulnerability OBB-1338070
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
siaapm.cultura.mg.gov.br Cross Site Scripting vulnerability OBB-1284766
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Exploit for CVE-2019-14339
CVE-2019-14339 Content Provider URI Injection on Canon PRINT...
portal.camposgerais.mg.gov.br XSS vulnerability
Open Bug Bounty ID: OBB-640483 Description| Value ---|--- Affected Website:| portal.camposgerais.mg.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Mongoose Denial of Service Vulnerability
Cesanta Mongoose is a set of embedded server libraries from the Irish company Cesanta, which includes features such as TCP, HTTP client and server, WenSocket client and server. A security vulnerability exists in the 'mghandlecgi' function of the mongoose.c file in Cesanta Mongoose version 6.11. A...
CVE-2017-10897
Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors...
mg-cars.be Open Redirect vulnerability
Vulnerable URL: http://www.mg-cars.be/Svh1bbe55rg4ycwf4isjnsc55/Site/SetCulture.aspx?culture=fr-FR=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:26 GMT Vulnerability type:| Open Redirect Vulnerability status:...
Trust Management Vulnerabilities in Multiple GE Products (CNVD-2015-05133)
GE Healthcare Millennium MG, NC and MyoSIGHT are General Electric GE scanning camera products for the healthcare industry. The security vulnerability in several GE products stems from the program's use of default passwords username: root password: root.genie, username: service password: service.,...
Trust Management Vulnerabilities in Multiple GE Products (CNVD-2015-05132)
GE Healthcare Millennium MG, NC and MyoSIGHT are General Electric GE scanning camera products for the healthcare industry. A security vulnerability exists in multiple GE products that stems from the use of 'insite.genieacq' which cannot be changed unless the program disables remote InSite-support...
CVE-2002-2446
GE Healthcare Millennium MG, NC, and MyoSIGHT has a password of insite.genieacq for the insite account that cannot be changed without disabling product functionality for remote InSite support, which has unspecified impact and attack vectors...
CVE-2002-2445
GE Healthcare Millennium MG, NC, and MyoSIGHT has a default password of 1 root.genie for the root user, 2 "service." for the service user, 3 admin.genie for the admin user, 4 reboot for the reboot user, and 5 shutdown for the shutdown user, which has unspecified impact and attack vectors...
CVE-2002-2445
CVE-2002-2445 affects GE Healthcare Millennium MG, NC, and MyoSIGHT. The vulnerability stems from the use of default passwords for multiple accounts (root.genie, service., admin.genie, reboot, shutdown). According to connected CNVD-2015-05133, an attacker could exploit these defaults to take cont...
CVE-2002-2446
The CVE-2002-2446 issue affects GE Healthcare Millennium MG / NC / MyoSIGHT (and related GE imaging systems) due to default or hard-coded credentials: the insite.genieacq password cannot be changed without disabling remote InSite support. This enables potential remote authentication bypass on aff...
mg-soft net inspector 6.5.0.828 Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: MG-SOFT Net Inspector http://www.mg-soft.com/netinsp.html bug C affects any MgWTrap3 service which is included in almost all the MG-SOFT products like MIB Browser, Query Manager, Trap Ringer Pro and so on Versions: Net Inspector =...
CVE-2010-4791
SQL injection vulnerability in infusions/mguserfotoalbumpanel/mguserfotoalbum.php in the MG User-Fotoalbum mguserfotoalbumpanel module 1.0.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the albumid parameter...
Sql injection
SQL injection vulnerability in infusions/mguserfotoalbumpanel/mguserfotoalbum.php in the MG User-Fotoalbum mguserfotoalbumpanel module 1.0.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the albumid parameter...
CVE-2010-4791
The CVE-2010-4791 entry describes an SQL injection in MG User-Fotoalbum (mg_user_fotoalbum_panel) module 1.0.1 for PHP-Fusion, triggered via the album_id parameter in infusions/mg_user_fotoalbum_panel/mg_user_fotoalbum.php. The vulnerability allows remote attackers to execute arbitrary SQL comman...
SQL injection vulnerability in Natychmiast CMS
Title: SQL injection vulnerability in Natychmiast CMS Date: 03.03.2010 Author: Ariko-Security Software Link: http://www.natychmiast-cms.pl/ Version: ALL ============ Ariko-Security - Advisory 2/3/2010 ============= SQL injection and XSS vulnerability in NATYCHMIAST CMS Vendor's Description of...
WebAdministrator Lite CMS - SQL Injection
WebAdministrator Lite CMS - SQL Injection ============ Ariko-Security - Advisory 5/2/2010 ============= SQL injection vulnerability in WebAdministrator Lite CMS Vendor's Description of Software: http://jskinternet.pl/portal/jsk/3/Oferta.html Dork: webadministrator lite Application Info: Name:...