Malicious code in @zalastax/nolb-osa (npm)

The package @zalastax/nolb-osa was found to contain malicious code...

MAL-2025-12842 Malicious code in @zalastax/nolb-osa (npm)

The package @zalastax/nolb-osa was found to contain malicious code...

osa-portal.de Cross Site Scripting vulnerability OBB-3872676

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

osa-abrasives.org Improper Access Control vulnerability OBB-3769872

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

osa-portal.de Cross Site Scripting vulnerability OBB-3372300

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

osa-portal.de Cross Site Scripting vulnerability OBB-3368263

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

OTRS XSS Vulnerability (OSA-2022-11)

OTRS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:otrs:otrs"; if...

Malicious code in osa-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abb86c551cc1e54d387182b03b03bd602740316fdccd3cfd5b3a2c7a20a6fb1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5127 Malicious code in osa-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abb86c551cc1e54d387182b03b03bd602740316fdccd3cfd5b3a2c7a20a6fb1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

osa-portal.de Cross Site Scripting vulnerability OBB-2166624

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

OTRS DoS Vulnerability (OSA-2021-09)

OTRS is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:otrs:otrs"; if descriptio...

osa-portal.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1152948 Security Researcher cvesh Helped patch 9 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting osa-portal.de website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO...

CVE-2020-1773

An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, password reset tokens and automatically generated passwords. This issue affects OTRS Community Edition:...

CVE-2020-1773

An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, password reset tokens and automatically generated passwords. This issue affects OTRS Community Edition:...

CVE-2020-1773

An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, password reset tokens and automatically generated passwords. This issue affects OTRS Community Edition:...

CVE-2020-1773 Session / Password / Password token leak

An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, password reset tokens and automatically generated passwords. This issue affects OTRS Community Edition:...

OTRS 6.x < 6.0.8 Privilege Escalation Vulnerability (OSA-2018-02)

OTRS is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:otrs:otrs"; if description...

OTRS Unspecified Remote Code Execution (OSA-2017-04)

The version of OTRS running on the remote host is 3.3.x prior to 3.3.18, 4.0.x prior to 4.0.25, 5.0.x prior to 5.0.23 or 6.0.x prior to 6.0.beta2. It is, therefore, affected by a remote code execution vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description...

openSUSE Security Update : otrs (openSUSE-2016-1316)

This update for otrs fixes the following security issues : - CVE-2016-9139: execution of JavaScript in OTRS context by opening malicious attachment OSA-2016-02, bsc1008017 In addition, OTRS was updated to 3.3.16, containing all upstream improvements and bug fixes. %NASLMINLEVEL 70300 C Tenable...

osapublishing.org Open Redirect vulnerability

Vulnerable URL: https://www.osapublishing.org/josaa/closeannouncement.cfm?redir=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 13.01.2017 Latest check for patch:| 13.01.2017 02:20 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed...