54 matches found
CVE-2023-22721
Affected software: Oi Yandex.Maps for WordPress plugin, versions
WordPress plugin Oi Yandex.Maps 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2023-18665 · WordPress · Oi Yandex.Maps For Wordpress
Name of the Vulnerable Software and Affected Versions: Oi Yandex.Maps for WordPress versions = 3.2.7 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS in Oi Yandex.Maps for WordPress. This allows an attacker to inject malicious scripts into the application,...
CVE-2023-22721: Improper Neutralization of Input During Web Page Generation
Auth. Stored Cross-Site Scripting XSS in Oi Yandex.Maps for WordPress = 3.2.7 versions...
oi-lens.com Cross Site Scripting vulnerability OBB-2662260
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
_transferBurn not decrementing totalSupply of OVL after burn
Handle hubble Vulnerability details Impact The function transferBurn is called by both transferFromBurn and transferBurn which again is used when unwinding or liquidation of a position in OI. Proof of Concept File : ovl/OverlayToken.sol file line 194 : function transferBurn address sender, addres...
VulnCheck KEV: CVE-2019-18396
An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Command Injection in the Ping module in the Web Interface in OIFwV20 allows remote attackers to execute arbitrary OS commands in the pingAddr parameter to mntping.cgi. NOTE: This ma...
CVE-2019-18396
An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Command Injection in the Ping module in the Web Interface in OIFwV20 allows remote attackers to execute arbitrary OS commands in the pingAddr parameter to mntping.cgi. NOTE: This ma...
CVE-2019-18396
An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Command Injection in the Ping module in the Web Interface in OIFwV20 allows remote attackers to execute arbitrary OS commands in the pingAddr parameter to mntping.cgi. NOTE: This ma...
CVE-2019-18396
An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Command Injection in the Ping module in the Web Interface in OIFwV20 allows remote attackers to execute arbitrary OS commands in the pingAddr parameter to mntping.cgi. NOTE: This ma...
CVE-2019-18396
A Command Injection vulnerability exists in the Ping module of the web interface within Oi third-party firmware (specifically OI_Fw_V20 ) installed on Technicolor TD5130v2 devices. The flaw is caused by insufficient input validation in the pingAddr parameter of mnt_ping.cgi, allowing remote attac...
PT-2019-15393
Name of the Vulnerable Software and Affected Versions Technicolor TD5130v2 devices with Oi third-party firmware OI Fw V20 Description A Command Injection issue in the Ping module of the Web Interface allows remote attackers to execute arbitrary OS commands. This is achieved by exploiting the...
oi-su.net Open Redirect vulnerability
Open Bug Bounty ID: OBB-598254 Description| Value ---|--- Affected Website:| oi-su.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
DEBIAN-CVE-2014-3539
base/oi/doa.py in the Rope library in CPython aka Python allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load...
CVE-2014-3539: Undefined Security Weakness
base/oi/doa.py in the Rope library in CPython aka Python allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load...
PT-2017-2798
Name of the Vulnerable Software and Affected Versions Technicolor TD5336 OI Fw v7 Description The issue is related to command injection in the Ping Module of the Web Interface. It allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the pingAddr parameter t...
OI File Manager - ContentProvider mode not defined, Exported ContentProvider, Exported components vulnerabilities
HackApp vulnerability scanner discovered that application OI File Manager published at the 'play' market has multiple vulnerabilities...
PT-2018-4213 · Python · Rope +1
Name of the Vulnerable Software and Affected Versions: CPython affected versions not specified Description: The issue allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load in the Rope library. This is due to a problem in the base/oi/doa.py file...
CVE-2014-5916
The Minha Oi aka br.com.mobicare.minhaoi application 1.15.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Minha Oi aka br.com.mobicare.minhaoi application 1.15.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...