122 matches found
AllTube Download 代码问题漏洞
AllTube Download is a Youtube-dl Web Gui by Pierre Rudloff, an individual developer. A security vulnerability exists in AllTube Download that stems from the presence of server-side request forgery SSRF in rudloff alltube...
st-pierre-daurillac.fr Cross Site Scripting vulnerability OBB-1484580
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
pierre-shigaki.jp Cross Site Scripting vulnerability OBB-1395922
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
pierre-shigaki.jp Cross Site Scripting vulnerability OBB-1387983
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
mineral-pierre-naturelle.fr Cross Site Scripting vulnerability
Security Researcher metamorfosec Helped patch 1935 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting mineral-pierre-naturelle.fr website and its users...
pierre-alentour.fr XSS vulnerability
Open Bug Bounty ID: OBB-568018 Description| Value ---|--- Affected Website:| pierre-alentour.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
saintpierrelacour.fr XSS vulnerability
Open Bug Bounty ID: OBB-557874 Description| Value ---|--- Affected Website:| saintpierrelacour.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosur...
D-link ten vulnerabilities 0Day studies attach detailed procedures-vulnerability warning-the black bar safety net
Security researcher Pierre Kim recently revealed the D-Link DIR 850LAC1200-Type Dual-Band Gigabit cloud router is exposed 10 a safety score comprisesXSSattack invasion, shortage of proper firmware cover, back door and root mention the right. Here are 10 Safety scores are: Firmware to. The firmwar...
pierre-fabre.com XSS vulnerability
Vulnerable URL: https://www.pierre-fabre.com/en/search/%3Cimg%20src=x%20onerror=prompt%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 255489 VIP website...
Apache XML Graphics FOP 2.1 Information Disclosure Vulnerability
Exploit for multiple platform in category remote exploits CVE-2017-5661: Apache XML Graphics FOP information disclosure vulnerability Severity: Medium Vendor: The Apache Software Foundation Versions Affected: FOP 1.0 - 2.1 Description: Files lying on the filesystem of the server which uses batik...
OpenBSD 6.0 httpd Content-Length DoS Exploit
Exploit for openbsd platform in category dos / poc Log message: Reimplement httpd's support for byte ranges. The previous implementation loaded all the output into a single output buffer and used its size to determine the Content-Length of the body. The new implementation calculates the body leng...
Apache Tika 1.13 Code Execution Vulnerability
Apache Tika wraps the jmatio parser to handle MATLAB files. The parser uses native deserialization on serialized Java objects embedded in MATLAB files. A malicious user could inject arbitrary code into a MATLAB file that would be executed when the object is deserialized. Versions 1.6 through 1.13...
pierre-et-lilou.fr XSS vulnerability
Vulnerable URL: http://pierre-et-lilou.fr/vetement-enfant-search.php?q=Hello%22+onfocus%3Dalert%28%2FOPENBUGBOUNTY%2F%29+autofocus%3D%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
pierre-lannier.fr XSS vulnerability
Vulnerable URL: http://www.pierre-lannier.fr/?s=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E〈=fr Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
FreeBSD bsnmpd Information Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: FreeBSD bsnmpd information disclosure Advisory URL: https://pierrekim.github.io/advisories/CVE-2015-5677-freebsd-bsnmpd.txt Blog URL: https://pierrekim.github.io/blog/2016-01-15-cve-2015-5677-freebsd-bsnmpd.html Date...
Debian DSA-3431-1 : ganeti - security update
Pierre Kim discovered two vulnerabilities in the restful API of Ganeti, a virtual server cluster management tool. SSL parameter negotiation could result in denial of service and the DRBD secret could leak. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...
OpenBSD net-snmp Information Disclosure Vulnerability
OpenBSD net-snmp suffers from a credential and information disclosure vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: OpenBSD package 'net-snmp' information disclosure Advisory URL: https://pierrekim.github.io/advisories/CVE-2015-8100-openbsd-net-snmp.tx...
pierre-lang.com XSS vulnerability
Vulnerable URL: http://www.pierre-lang.com/pierrelangweb/search.htm?suche=%22%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3B%3C%2Fscript%3E&submit.x;=0&submit.y;=0 Details: Description| Value ---|--- Patched:| Yes, at 22.10.2015 Latest check for patch:| 22.10.2015 06:17 GMT Vulnerability type:| XSS...
FreeBSD : suricata -- TLS/DER Parser Bug (DoS) (fe910ed6-f88d-11e4-9ae3-0050562a4d7b)
OISF Development Team reports : The OISF development team is pleased to announce Suricata 2.0.8. This release fixes a number of issues in the 2.0 series. The most important issue is a bug in the DER parser which is used to decode SSL/TLS certificates could crash Suricata. This issue was reported ...
suricata -- TLS/DER Parser Bug (DoS)
OISF Development Team reports: The OISF development team is pleased to announce Suricata 2.0.8. This release fixes a number of issues in the 2.0 series. The most important issue is a bug in the DER parser which is used to decode SSL/TLS certificates could crash Suricata. This issue was reported b...