183 matches found
Information Disclosure
dbtcore is vulnerable to Information Disclosure. The vulnerability is caused by logging the Personal Access Token PAT in plaintext to the package-lock.yml file. If an attacker gains access to this file, they can exfiltrate the sensitive PAT token...
pat-billiard.com Cross Site Scripting vulnerability OBB-3763647
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Snapchat: internal dev tokens disclosure
Sensitive internal development information was inadvertently disclosed in the commits history of the open-source project Keydb, which was made public by Snapchat. This included a Personal Access Token PAT used for GitHub authentication, which could have been exploited by malicious actors...
CVE-2023-26042
Part-DB is an open source inventory management system for your electronic components. User input was found not being properly escaped, which allowed malicious users to inject arbitrary HTML into the pages. The Content-Security-Policy forbids inline and external scripts so it is not possible to...
Design/Logic Flaw
Part-DB is an open source inventory management system for your electronic components. User input was found not being properly escaped, which allowed malicious users to inject arbitrary HTML into the pages. The Content-Security-Policy forbids inline and external scripts so it is not possible to...
SUSE CVE-2016-9813
The parsepat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...
Hughes Satellite Router Remote File Inclusion Cross Frame Scripting Vulnerability
Hughes Satellite Router contains a cross-frame scripting via remote file inclusion vulnerability that may potentially be exploited by malicious users to compromise an affected system. This vulnerability may allow an unauthenticated malicious user to misuse frames, include JS/HTML code and steal...
pat-it.co.uk Cross Site Scripting vulnerability OBB-3072068
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Malicious code in uphold-pat (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8de2ad4055b13227aa060525f60fa96d3b88271689727aa2c4b8daaa431dff01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6808 Malicious code in uphold-pat (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8de2ad4055b13227aa060525f60fa96d3b88271689727aa2c4b8daaa431dff01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in uphold-pat-sample (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06258e7d8122ae9b2fe6d59678385fd3d02dd2c039d781066d8604928ce1a71d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6809 Malicious code in uphold-pat-sample (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06258e7d8122ae9b2fe6d59678385fd3d02dd2c039d781066d8604928ce1a71d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Shopify: Github access token exposure
While dissecting an application made by one of your employees I found his GitHub Personal Access Token PAT, he's a member of the org with pull and push access to all of your repositories. As a proof I can tell you that on the repo github.com/Shopify/shopify at commit hash cea9c273391d the sha512 ...
ptit-pat-rouennais.fr Cross Site Scripting vulnerability OBB-1193061
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Beijing Mo Yan Ju Ke Culture Communication Co. pat dating app has denial of service vulnerability
Pat Dating app is a new social chat dating application. Pat Dating app has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service vulnerability...
CVE-2020-5262
In EasyBuild before version 4.1.2, the GitHub Personal Access Token PAT used by EasyBuild for the GitHub integration features like --new-pr, --fro,-pr, etc. is shown in plain text in EasyBuild debug log files. This issue is fixed in EasyBuild v4.1.2, and in the master+ develop branches of the...
DEBIAN-CVE-2016-9813
The parsepat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...
UBUNTU-CVE-2016-9813
The parsepat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...
openSUSE Security Update : gstreamer-plugins-bad (openSUSE-2017-63)
This update for gstreamer-plugins-bad fixes the following security issues, which would allow attackers able to submit media files for indexing to cause code execution or crashes : - Check an integer overflow CVE-2016-9445 and initialize a buffer CVE-2016-9446 in vmncdec. bsc1010829 - CVE-2016-980...
gstreamer1-plugins-bad-free security update
1.4.5-6 - Fix h264 and h265 buffer size checks - Fix mpegts pat parsing and add more size checks Resolves: rhbz1400897 1.4.5-5 - vmncdec: Sanity-check width/height before using it Resolves: rhbz1400897...