74 matches found
om-bet.com Cross Site Scripting vulnerability OBB-3220392
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Malicious code in om-helers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96f9a93e537b606ceb960bbf61b0d502d85663ffc0b57b50e4525329103a3dd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5060 Malicious code in om-helers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96f9a93e537b606ceb960bbf61b0d502d85663ffc0b57b50e4525329103a3dd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
new packages: hunspell-om
An update is available for hunspell-om. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
om-d.com Cross Site Scripting vulnerability OBB-2476228
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
User Impersonation
hadoop-ozone-common is vulnerable to user impersonation. The vulnerability exists due to an insecure validation of owner field of S3AUTHINFO type delegation token, allowing authenticated users with valid Ozone S3 credentials to create specific OM requests and impersonate other user...
CVE-2021-39236
In Apache Ozone before 1.2.0, Authenticated users with valid Ozone S3 credentials can create specific OM requests, impersonating any other user...
File Read Vulnerability in OM Web Video Conferencing System
The video conferencing system is a real-time interactive online meeting system. A file read vulnerability exists in OM Web Video Conferencing System, which can be exploited by attackers to obtain sensitive information...
om-mp.be XSS vulnerability
Vulnerable URL: http://www.om-mp.be/index2.php?paction=loginpageid=198startpageid=1%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 19:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
Linux/x86-64 - mkdir Shellcode (25 bytes)
/ --------------------------------------------------------------------------------------------------- Linux/x86x64 - mkdir"ajit", 755 - 25 bytes Ajith Kp http://fb.com/ajithkp560 http://www.terminalcoders.blogspot.com Vishnu Nath Kp http://www.terminalcoders.blogspot.com Sayooj S Nambiar...
Charm lesson OM video conferencing system /admin/do/proxy.php file target parameter remote file include vulnerability
No description provided by source...
My Om Nom - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application My Om Nom published at the 'play' market has multiple vulnerabilities...
Typosquatters Target Mac Users With New .OM Domain Scam
Typosquatters are targeting Apple computer users with malware in a recent campaign that snares clumsy web surfers who mistakenly type .om instead of .com when surfing the web. According to Endgame security researchers, the top level domain for Middle Eastern country Oman .om is being exploited by...
Security feature bypass
Unspecified vulnerability in the Siebel Core - Server OM Svcs component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Security...
CVE-2015-2600
Unspecified vulnerability in the Siebel Core - Server OM Svcs component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Security...
CVE-2015-2600
CVE-2015-2600 is an Oracle Siebel CRM vulnerability affecting the Siebel Core – Server OM Svcs component (Security subcomponent) on versions 8.1.1, 8.2.2 and 15.0. The connected Nessus entry confirms a vulnerability that permits authenticated network attacks via HTTPS, resulting in unauthorized r...
Design/Logic Flaw
Unspecified vulnerability in the Siebel Core - Server OM Services component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via vectors related to Security - LDAP Security Adapter...
CVE-2015-0387
CVE-2015-0387 affects Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the Siebel Core - Server OM Services component (Security - LDAP Security Adapter). The issue enables remote authenticated users to affect confidentiality via LDAP-related vectors. No exploitation details or mitigation are provi...
CVE-2015-0387
Unspecified vulnerability in the Siebel Core - Server OM Services component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via vectors related to Security - LDAP Security Adapter...
