945 matches found
cefarm24.pl Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1148709 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
el12.pl Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1144789 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting el12.pl website and its...
GaussDB: Enable PL Audit
If the audit level is set to 8, the parsing and execution of stored procedures are audited, for example, EXECUTE EXEC and CALL. In addition, the definitions of anonymous blocks in stored procedures are audited. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted fr...
Access Restriction Bypass
PostgreSQL is vulnerable to Access Restriction Bypass. Due to a flaw found in the way PostgreSQL enforced permission checks on scripts written in PL/Perl. If the PL/Perl procedural language was registered on a particular database, an authenticated database user running a specially-crafted PL/Perl...
Remote Code Execution (RCE)
PostgreSQL is vulnerable to remote code execution RCE. Due to a flaw found in the way PostgreSQL enforced permission checks on scripts written in PL/Tcl, if the PL/Tcl procedural language was registered on a particular database, an authenticated database user running a specially-crafted PL/Tcl...
open24.pl Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1134520 Security Researcher kun-fly Helped patch 668 vulnerabilities Received 7 Coordinated Disclosure badges Received 43 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting open24.pl website and its...
golf3.pl Cross Site Scripting vulnerability
Security Researcher g0bl1nsec Helped patch 3608 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting golf3.pl website and its users. Following coordinated and...
dentalz3.pl Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1123531 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting dentalz3.pl website and it...
CVE-2020-10875
Motorola FX9500 devices allow remote attackers to conduct absolute path traversal attacks, as demonstrated by PL/SQL Server Pages files such as /include/viewtagdb.psp...
Path traversal
Motorola FX9500 devices allow remote attackers to conduct absolute path traversal attacks, as demonstrated by PL/SQL Server Pages files such as /include/viewtagdb.psp...
CVE-2020-10875
Motorola FX9500 devices allow remote attackers to conduct absolute path traversal attacks, as demonstrated by PL/SQL Server Pages files such as /include/viewtagdb.psp...
CVE-2020-10875
The CVE-2020-10875 entry applies to Motorola FX9500 devices (Zebra FX9500 rebrand). A remote attacker can perform an absolute path traversal, demonstrated by PL/SQL Server Pages files such as /include/viewtagdb.psp. The Red Hat and CNVD entries corroborate the vulnerability description; Tenable p...
CVE-2020-10875: Improper Limitation of a Pathname to a Restricted Directory
Motorola FX9500 devices allow remote attackers to conduct absolute path traversal attacks, as demonstrated by PL/SQL Server Pages files such as /include/viewtagdb.psp...
PT-2020-12391
Name of the Vulnerable Software and Affected Versions Motorola FX9500 devices affected versions not specified Description The issue allows remote attackers to conduct absolute path traversal attacks. This is demonstrated by PL/SQL Server Pages files such as "/include/viewtagdb.psp". Recommendatio...
silky24.pl Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1122200 Security Researcher Harny Helped patch 1 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting silky24.pl website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147...
ekobiuro24.pl Cross Site Scripting vulnerability
Security Researcher kun-fly Helped patch 589 vulnerabilities Received 7 Coordinated Disclosure badges Received 40 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting ekobiuro24.pl website and its users. Following coordinated...
el12.pl Cross Site Scripting vulnerability
Security Researcher g0bl1nsec Helped patch 3661 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting el12.pl website and its users. Following coordinated and...
streetstyle24.pl Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1046633 Security Researcher ImPRINCE Helped patch 126 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting streetstyle24.pl website and its users. Following...
@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2019-19507 via jpv (2.0.1)
jpv NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on jpv and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2019-19507 Source advisory: OSV:GHSA-RH46-3FGC-MVRF...
turbodiesel24.pl Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1023890 Security Researcher IAMMUSTAFA Helped patch 521 vulnerabilities Received 9 Coordinated Disclosure badges Received 51 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting turbodiesel24.pl website...