ashof.org XSS vulnerability

Open Bug Bounty ID: OBB-598454 Description| Value ---|--- Affected Website:| ashof.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cisef.org XSS vulnerability

Open Bug Bounty ID: OBB-597667 Description| Value ---|--- Affected Website:| cisef.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Eliminating Dwell Time with Cb Response and Red Canary

How Can I Efficiently Organize and Lead the People on My Team? Organizing your team to protect your environment with agility is a difficult task with all the varied skills and challenges related to traditional security operations center SOC structures. We asked our partners at Red Canary, who eve...

medical-rights.org.il XSS vulnerability

Open Bug Bounty ID: OBB-593949 Description| Value ---|--- Affected Website:| medical-rights.org.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Allok Video Joiner 4.6.1217 - Stack-Based Buffer Overflow

SWAMI KARUPASAMI THUNAI Exploit Title: Alloksoft Video joiner 4.6.1217 - Buffer Overflow Vulnerability Windows XP SP3 Date: 06-03-2018 Exploit Author: Mohan Ravichandran & Velayutham Selvaraj Organization : TwinTech Solutions Vulnerable Software: Allok Video joiner Vendor Homepage:...

sintercamp.org.br XSS vulnerability

Open Bug Bounty ID: OBB-591197 Description| Value ---|--- Affected Website:| sintercamp.org.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Gitleaks - Searches Full Repo History For Secrets And Keys

Searches Full Repo History For Secrets And Keys. Installing go get -u github.com/zricethezav/gitleaks Usage and Explanation ./gitleaks options Gitleaks audits local and remote repos by running regex checks against all commits. Options usage: gitleaks options / Options: -u --user Git user mode -r...

powerhouse.org XSS vulnerability

Open Bug Bounty ID: OBB-573411 Description| Value ---|--- Affected Website:| powerhouse.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

foreman: Stored XSS via organization/location with HTML in name

It was found that foreman is vulnerable to a stored XSS via an organization or location name. This could allow an attacker with privileges to set the organization or location name to display arbitrary HTML including scripting code within the web interface...

foreman: privilege escalation through Organization and Locations API

It was found that Satellite 6 did not properly enforce access controls on certain resources. An attacker, with access to the API and knowledge of the ID name, can potentially access other resources in other organizations...

foreman: models with a 'belongs_to' association to an Organization do not verify association belongs to that Organization

It was found that foreman in Satellite 6 did not properly enforce access controls on certain resources. An attacker with access to the API and knowledge of the resource name can access resources in other organizations...

foreman: Stored XSS in org/loc wizard

A vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman, if the name contains HTML then the second step of the wizard /organizations/id/step2 will render the HTML. This occurs in the alertbox on the page. The result is a stored XSS attack if an...

sunvillage.org XSS vulnerability

Open Bug Bounty ID: OBB-556016 Description| Value ---|--- Affected Website:| sunvillage.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-6199

A remote attacker could bypass the Sandstorm organization restriction before build 0.203 via a comma in an email-address field...

CVE-2017-6199

A remote attacker could bypass the Sandstorm organization restriction before build 0.203 via a comma in an email-address field...

CVE-2017-6199

A remote attacker could bypass the Sandstorm organization restriction before build 0.203 via a comma in an email-address field...

CVE-2017-6199

Sandstorm (build prior to 0.203) is affected by CVE-2017-6199 due to insufficient validation of an email-address field, allowing remote attackers to bypass the Sandstorm organization restriction. The issue is tied to version pre-0.203; upgrading to build 0.203 or later is the documented remediati...

ungei.org XSS vulnerability

Open Bug Bounty ID: OBB-550586 Description| Value ---|--- Affected Website:| ungei.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

uier.org.ar XSS vulnerability

Open Bug Bounty ID: OBB-549280 Description| Value ---|--- Affected Website:| uier.org.ar Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure...

iscm.org XSS vulnerability

Open Bug Bounty ID: OBB-549032 Description| Value ---|--- Affected Website:| iscm.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...