Ubuntu: Security Advisory (USN-6885-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Improper Encoding or Escaping of Output in Apache Http_Server

CVE-2024-38473 Nuclei Template !imagehttps://github.com/us...

Improving Apache httpd Protections Proactively with Orange Tsai of DEVCORE

...

Improving Apache httpd Protections Proactively with Orange Tsai of DEVCORE

...

Facebook Ads Lead to Fake Websites Stealing Credit Card Information

Facebook users are the target of a scam e-commerce network that uses hundreds of fake websites to steal personal and financial data using brand impersonation and malvertising tricks. Recorded Future's Payment Fraud Intelligence team, which detected the campaign on April 17, 2024, has given it the...

MAL-2024-2807 Malicious code in orange_gs_locals (npm)

--- -= Per source details. Do not edit below this line.=-...

Exploit for OS Command Injection in Php

CVE-2024-4577: Critical Vulnerability in PHP's CGI Configurati...

Exploit for OS Command Injection in Php

CVE-2024-4577 A Proof of Concept developed by @watchTowrhtt...

Exploit for OS Command Injection in Php

Orange Tsi 🍊 This vulnerability was found by Orange Tsai @oran...

Exploit for OS Command Injection in Php

Orange Tsi 🍊 This vulnerability was found by Orange Tsai @oran...

EC-Orange vulnerable to authorization bypass

Overview EC-Orange provided by S-cubism Inc. is an e-commerce website building system package based on an open source software EC-CUBE. EC-Orange contains an authorization bypass vulnerability CWE-639. This is the same issue as JVN51770585 EC-CUBE vulnerable to authorization bypass. This...

JVN#15637138: EC-Orange vulnerable to authorization bypass

EC-Orange provided by S-cubism Inc. is an e-commerce website building system package based on an open source software EC-CUBE. EC-Orange contains an authorization bypass vulnerability CWE-639. This is the same issue as JVN51770585 EC-CUBE vulnerable to authorization bypass. Impact A user of the...

orangeartgallery.ca Cross Site Scripting vulnerability OBB-3854656

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Orange Spain Faces BGP Traffic Hijack After RIPE Account Hacked by Malware

Mobile network operator Orange Spain suffered an internet outage for several hours on January 3 after a threat actor used administrator credentials captured by means of stealer malware to hijack the border gateway protocol BGP traffic. "The Orange account in the IP network coordination center RIP...

CVE-2023-50429

IzyBat Orange casiers before 202308031 allows getEnsemble.php ensemble SQL injection...

CVE-2023-50429

IzyBat Orange casiers before 202308031 allows getEnsemble.php ensemble SQL injection...

CVE-2023-50429

IzyBat Orange casiers before 202308031 allows getEnsemble.php ensemble SQL injection...

Sql injection

IzyBat Orange casiers before 202308031 allows getEnsemble.php ensemble SQL injection...

IzyBat Orange casiers security breach

IzyBat Orange casiers is a website. A security vulnerability exists in versions prior to IzyBat Orange casiers 202308031, which stems from allowing SQL injection via getEnsemble.php ensemble...

CVE-2023-50429

CVE-2023-50429 affects IzyBat Orange casiers prior to 20230803_1. The issue is an ensemble SQL injection in getEnsemble.php ensemble, caused by improper input handling on that endpoint. Reported impact is severe (per CVSS: high confidentiality and integrity impacts, critical overall). Remediation...