187 matches found
mail.mv-agusta-club.com Cross Site Scripting vulnerability OBB-1220088
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
mv-werften.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1109644 Security Researcher Hchabik Helped patch 2357 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting mv-werften.com website and...
Rockwell Automation ArmorPoint 2pt TC/mV Input M12 1738-IT2IM12/A
Binary data 753875.prm...
Sinking a ship and hiding the evidence
Our earlier work on Voyage Data Recorder manipulation got us thinking about how a malicious individual or organisation might bring about the demise of a ship and hide the evidence. There are plenty of ways to get malware on to a ship. Whether it’s via satcoms, phishing, USB, crew Wi-Fi, dodgy DVD...
mv-konradsheim.at XSS vulnerability
Open Bug Bounty ID: OBB-709276 Description| Value ---|--- Affected Website:| mv-konradsheim.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...
MV Video Sharing Software 1.2 SQL Injection
Exploit Title: MV Video Sharing Software 1.2 - 'searchname' SQL Injection Dork: N/A Date: 2018-10-16 Exploit Author: Ihsan Sencan Vendor Homepage: https://melerovideo.com/software/ Software Link: https://sourceforge.net/projects/mvvideosharingsoftware/ Version: 1.2 Category: Webapps Tested on:...
mv-wiesen.info XSS vulnerability
Open Bug Bounty ID: OBB-645889 Description| Value ---|--- Affected Website:| mv-wiesen.info Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
HP VAN SDN Controller Root Command Injection Exploit
This Metasploit module exploits a hardcoded service token or default credentials in HPE VAN SDN Controller versions 2.7.18.0503 and below to execute a payload as root. A root command injection was discovered in the uninstall action's name parameter, obviating the need to use sudo for privilege...
Threat Outbreak Alert RuleID32912: Email Messages Distributing Malicious Software on June 7, 2018
Medium Alert ID: 58062 First Published: 2018 June 7 20:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32912 may contain the following files: Name | Size...
Fedora 27 : coreutils (2018-669520d2ba)
doc: warn about following symlinks recursively in chown/chgrp CVE-2017-18018 - mv -n: do not overwrite the destination - mv -n: provide more reliable diagnostic messages Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...
mv-job.de XSS vulnerability
Open Bug Bounty ID: OBB-443422 Description| Value ---|--- Affected Website:| mv-job.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
mv-sachsen-anhalt.de XSS vulnerability
Open Bug Bounty ID: OBB-441351 Description| Value ---|--- Affected Website:| mv-sachsen-anhalt.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...
Debian DSA-3996-1 : ffmpeg - security update
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed Real, MV, RL2, ASF, Apple HLS, Phantom Cine, MXF, NSV, MOV or RTP H.264 files/streams are processed. %NASLMINLEVEL...
[SECURITY] [DSA 3996-1] ffmpeg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3996-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 10, 2017 https://www.debian.org/security/faq -...
mv-schloesser.de XSS vulnerability
Vulnerable URL: https://www.mv-schloesser.de/vrview/index.html?image=xss%22%3C/p%3E%3Ccenter%3E%3Ch1%3EType%20anything%3C/h1%3E%3Cp%3E%3Cinput%20type=search%20oninput=prompt/openbugbounty/%3E%3C/center%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.12.2017...
UBUNTU-CVE-2017-14055
In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mvreadheader due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nbframes" field in the header but does not contain sufficient backing data, is provided, the loop over t...
CVE-2017-14055
In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mvreadheader due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nbframes" field in the header but does not contain sufficient backing data, is provided, the loop over t...
CVE-2017-14055
In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mvreadheader due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nbframes" field in the header but does not contain sufficient backing data, is provided, the loop over t...
mv-spion.de XSS vulnerability
Vulnerable URL: http://www.mv-spion.de/registrieren/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 512091 VIP website status:| No Check mv-spion.de SSL connection:| Grade: A Coordinated Disclosure Timeline:...
Threat Outbreak Alert RuleID29266: Email Messages Distributing Malicious Software on May 24, 2017
Medium Alert ID: 53953 First Published: 2017 May 24 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29266 may contain the following files: Name | Size...