71 matches found
Code injection
An issue was discovered ph-json thru 9.5.5 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
CVE-2023-34612
The CVE concerns ph-json up to version 9.5.5 in ph-commons/ph-json stack. Affected component/ordering causes denial of service via crafted objects that use cyclic dependencies, leading to high impact (availability). Root cause described across sources is lack of safeguards when handling cyclic de...
PT-2023-24949 · Ph-Json · Ph-Json
Name of the Vulnerable Software and Affected Versions: ph-json versions 9.5.5 and earlier Description: An issue allows attackers to cause a denial of service or other unspecified impacts via a crafted object that uses cyclic dependencies. Recommendations: For versions 9.5.5 and earlier, consider...
CVE-2023-34612
An issue was discovered ph-json thru 9.5.5 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
ph-commons 缓冲区错误漏洞
ph-commons is a set of shared Java 11+ libraries used in many other projects by the individual developer Philip Helger. A security vulnerability exists in ph-commons ph-json 9.5.5 and earlier versions, which stems from a vulnerability that allows an attacker to cause a denial of service by using...
CVE-2023-34612
An issue was discovered ph-json thru 9.5.5 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
CVE-2023-34612
An issue was discovered ph-json thru 9.5.5 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
ph-cosmetics.de Cross Site Scripting vulnerability OBB-3268149
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ph-cosmetics.de Cross Site Scripting vulnerability OBB-3034770
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ph-berlin.de Cross Site Scripting vulnerability OBB-2692873
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
truck1.ph Cross Site Scripting vulnerability OBB-2467479
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ati.da.gov.ph Improper Access Control vulnerability OBB-2423213
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cars.trovit.ph Open Redirect vulnerability OBB-2348644
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ph-ooe.at Cross Site Scripting vulnerability OBB-2300136
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
aruga.com.ph Improper Access Control vulnerability OBB-2254845
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Hackers try to poison Florida City’s drinking water
The FBI, the Secret Service, and the Pinellas County Sheriffs Office are currently investigating an attempted poisoning of a city by an individual or group of hackers that occurred Friday last week. If it hadnt been caught in time, at least 15,000 people could have been affected. In a Monday pres...
SQL injection vulnerability in the ph***_co*** parameter of the JEGallery component of Joomla!
Developed with PHP language and MySQL database, Joomla! is a content management system. A SQL injection vulnerability exists in the phco parameter of the Joomla! JEGallery component, which can be exploited by an attacker to obtain sensitive information from the database...
Matrix42 Workspace Management 9.1.2.2765 Cross Site Scripting Vulnerability
Matrix42 Workspace Management version 9.1.2.2765 suffers from a persistent cross site scripting vulnerability. Matrix42 Workspace Management 9.1.2.2765 – Stored Cross-Site Scripting =============================================================================== Identifiers...
ph-alpha.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1085592 Security Researcher Dipu1A Helped patch 999 vulnerabilities Received 5 Coordinated Disclosure badges Received 22 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting ph-alpha.com website and its...
VulnCheck KEV: CVE-2005-0862
Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via the phpbbrootpath parameter to 1 pocloginform.php or 2 phpbb/poc.php, the pocrootpath parameter to 3 phpbb/poc.php, 4 phpnuke/ENGLISHpoc.php, 5...