CVE-2023-22721

Affected software: Oi Yandex.Maps for WordPress plugin, versions

WordPress plugin Oi Yandex.Maps 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-18665 · WordPress · Oi Yandex.Maps For Wordpress

Name of the Vulnerable Software and Affected Versions: Oi Yandex.Maps for WordPress versions = 3.2.7 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS in Oi Yandex.Maps for WordPress. This allows an attacker to inject malicious scripts into the application,...

oi-lens.com Cross Site Scripting vulnerability OBB-2662260

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

_transferBurn not decrementing totalSupply of OVL after burn

Handle hubble Vulnerability details Impact The function transferBurn is called by both transferFromBurn and transferBurn which again is used when unwinding or liquidation of a position in OI. Proof of Concept File : ovl/OverlayToken.sol file line 194 : function transferBurn address sender, addres...

VulnCheck KEV: CVE-2019-18396

An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Command Injection in the Ping module in the Web Interface in OIFwV20 allows remote attackers to execute arbitrary OS commands in the pingAddr parameter to mntping.cgi. NOTE: This...

CVE-2019-18396

An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Command Injection in the Ping module in the Web Interface in OIFwV20 allows remote attackers to execute arbitrary OS commands in the pingAddr parameter to mntping.cgi. NOTE: This ma...

CVE-2019-18396

An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Command Injection in the Ping module in the Web Interface in OIFwV20 allows remote attackers to execute arbitrary OS commands in the pingAddr parameter to mntping.cgi. NOTE: This ma...

CVE-2019-18396

An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Command Injection in the Ping module in the Web Interface in OIFwV20 allows remote attackers to execute arbitrary OS commands in the pingAddr parameter to mntping.cgi. NOTE: This ma...

CVE-2019-18396

CVE-2019-18396 affects Technicolor TD5130v2 devices running OI_Fw_V20. A command injection exists in the Ping module of the Web Interface via the pingAddr parameter to mnt_ping.cgi, enabling remote attackers to execute arbitrary OS commands. Public details show an example payload in POST /mnt_pin...

oi-su.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-598254 Description| Value ---|--- Affected Website:| oi-su.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

DEBIAN-CVE-2014-3539

base/oi/doa.py in the Rope library in CPython aka Python allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load...

OI File Manager - ContentProvider mode not defined, Exported ContentProvider, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application OI File Manager published at the 'play' market has multiple vulnerabilities...

PT-2018-4213 · Python · Rope +1

Name of the Vulnerable Software and Affected Versions: CPython affected versions not specified Description: The issue allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load in the Rope library. This is due to a problem in the base/oi/doa.py file...

CVE-2014-5916

The Minha Oi aka br.com.mobicare.minhaoi application 1.15.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Minha Oi aka br.com.mobicare.minhaoi application 1.15.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5916

The Minha Oi aka br.com.mobicare.minhaoi application 1.15.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5916

The CVE-2014-5916 entry applies to the Minha Oi Android app (package br.com.mobicare.minhaoi) version 1.15.0. The root cause is failure to verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. The connected do...

Default credentials

Oi! Email Marketing System 3.0 aka Oi! 3 stores the server's FTP password in cleartext on a Configuration web page, which allows local users with superadministrator privileges, or attackers who have obtained access to the web page, to view the password...

Sql injection

SQL injection vulnerability in index.php aka the login page in Oi! Email Marketing System 3.0 aka Oi! 3 allows remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password fields...