150 matches found
Green Packet OH736 命令注入漏洞
The Green Packet OH736 is a router from Green Packet USA. A security vulnerability exists in the WR-1200 Indoor Unit, OT-235 M-IDU-1.6.0.3V1.1 version, and MH-46360-2.0.3-R5-GP version of the Green Packet OH736. By exploiting this vulnerability, an attacker can completely take over root privilege...
mh-schmuck.de Cross Site Scripting vulnerability OBB-3065038
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
mh-restaurant.de Cross Site Scripting vulnerability OBB-2731007
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
多款 Xiongmai 产品安全漏洞
The Xiongmai AHB7008T-MH-V2, among others, is a hard disk recorder DVR from Xiongmai Technology Xiongmai, a Chinese company. A security vulnerability exists in multiple Xiongmai products that originates from an open port 9530. An unauthenticated attacker can make an arbitrary Telnet connection to...
Security fix for the ALT Linux 8 package mailutils version 3.10-alt0.20200913.1
3.10-alt0.20200913.1 built March 2, 2021 Sergey Y. Afonin in task 267166 Sept. 27, 2020 Sergey Y. Afonin - New version CVE-2019-18862 fixed in 3.8 - Updated %description - Updated License tags to SPDX syntax - Require emacs-X11 for build only when mh subpackage is enabled ALT 38371 - Disabled...
mh-regale.de Cross Site Scripting vulnerability OBB-1367676
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
mh-regale.de Cross Site Scripting vulnerability OBB-1345396
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
mh-system.com Cross Site Scripting vulnerability OBB-1227906
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
MH-WikiBot Access Control Error Vulnerability
MH-WikiBot is a content management system. An access control error vulnerability exists in MH-WikiBot. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles. No detailed vulnerability details are available at this tim...
CVE-2020-5302
MH-WikiBot an IRC Bot for interacting with the Miraheze API, had a bug that allowed any unprivileged user to access the steward commands on the IRC interface by impersonating the Nickname used by a privileged user as no check was made to see if they were logged in. The issue has been fixed in...
CVE-2020-5302
MH-WikiBot an IRC Bot for interacting with the Miraheze API, had a bug that allowed any unprivileged user to access the steward commands on the IRC interface by impersonating the Nickname used by a privileged user as no check was made to see if they were logged in. The issue has been fixed in...
Design/Logic Flaw
MH-WikiBot an IRC Bot for interacting with the Miraheze API, had a bug that allowed any unprivileged user to access the steward commands on the IRC interface by impersonating the Nickname used by a privileged user as no check was made to see if they were logged in. The issue has been fixed in...
CVE-2020-5302
MH-WikiBot an IRC Bot for interacting with the Miraheze API, had a bug that allowed any unprivileged user to access the steward commands on the IRC interface by impersonating the Nickname used by a privileged user as no check was made to see if they were logged in. The issue has been fixed in...
CVE-2020-5302 unprivileged user can access priviledged action in MH-WikiBot
MH-WikiBot an IRC Bot for interacting with the Miraheze API, had a bug that allowed any unprivileged user to access the steward commands on the IRC interface by impersonating the Nickname used by a privileged user as no check was made to see if they were logged in. The issue has been fixed in...
CVE-2020-5302
MH-WikiBot (an IRC bot) suffered an access-control vulnerability: unprivileged users could invoke steward commands by impersonating a privileged user’s nickname on the IRC interface due to a missing login verification. The issue has been fixed in commit 23d9d5b0a59667a5d6816fdabb960b537a5f9ed1. T...
CVE-2020-5302: Improper Access Control
MH-WikiBot an IRC Bot for interacting with the Miraheze API, had a bug that allowed any unprivileged user to access the steward commands on the IRC interface by impersonating the Nickname used by a privileged user as no check was made to see if they were logged in. The issue has been fixed in...
mh-hannover.de XSS vulnerability
Open Bug Bounty ID: OBB-657342 Description| Value ---|--- Affected Website:| mh-hannover.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
mh-xr.gamerch.com XSS vulnerability
Open Bug Bounty ID: OBB-647006 Description| Value ---|--- Affected Website:| mh-xr.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
magellanhealth.com XSS vulnerability
Open Bug Bounty ID: OBB-623257 Description| Value ---|--- Affected Website:| magellanhealth.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
mh-audio.nl XSS vulnerability
Open Bug Bounty ID: OBB-596264 Description| Value ---|--- Affected Website:| mh-audio.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...