851 matches found
carletonplace.ca Cross Site Scripting vulnerability OBB-1281131
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
decimal-place-value-chart.com Cross Site Scripting vulnerability OBB-1275189
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
24x7.place Cross Site Scripting vulnerability OBB-1239730
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Lock and Code S1Ep8: Securely working from home (WFH) with John Donovan and Adam Kujawa
This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to John Donovan, head of security at Malwarebytes, and Adam Kujawa, director of Malwarebtyes Labs, about securely working from home WFH. With shelter-in-pla...
U.S. Dept Of Defense: Subdomain takeover of ███
Summary: The subdomain ██████ had an CNAME record pointing to an unclaimed ███████ webservice. This is a high severity security issue because an attacker can register the subdomain on ███ and therefore can own the subdomain █████████. Description: The dangling CNAME record of █████████ is pointin...
place-advisor.co.uk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1155083 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting place-advisor.co.uk websit...
CVE-2016-11046
An issue was discovered on Samsung mobile devices with JBP4.3, KK4.4, and L5.0/5.1 software. Because of a misused whitelist, attackers can reach the radio layer aka RIL or RILD to place calls or send SMS messages. The Samsung ID is SVE-2016-5733 May 2016...
place-advisor.in Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1114720 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting place-advisor.in website a...
24x7.place Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1011886 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting 24x7.place website and it...
October 15, 2019—KB4520015 (Preview of Monthly Rollup)
None None...
Find a Place CMS Directory 1.5 - assetsexternaldata_2.php cate SQL Injection
Find a Place CMS Directory 1.5 - assetsexternaldata2.php cate SQL Injection Exploit Title: Find a Place CMS Directory 1.5 - 'assets/external/data2.php cate' SQL Injection Google Dork: inurl:"assets/external/data.php" Date: 14 Feb 2019 Exploit Author: Deyaa Muhammad Author EMail: contact at deyaa....
Sql injection
Themerig Find a Place CMS Directory 1.5 has SQL Injection via the find/assets/external/data2.php cate parameter...
CVE-2019-8360
Themerig Find a Place CMS Directory 1.5 has SQL Injection via the find/assets/external/data2.php cate parameter...
CVE-2019-8360
Themerig Find a Place CMS Directory 1.5 has SQL Injection via the find/assets/external/data2.php cate parameter...
CVE-2019-8360
CVE-2019-8360 affects Themerig Find a Place CMS Directory 1.5. The connected sources describe an SQL injection vulnerability in the file path find/assets/external/data_2.php through the cate parameter. Root cause per CNVD: lack of validation of externally entered SQL statements in database-based ...
Find A Place CMS Directory 1.5 SQL Injection
Exploit Title: Find a Place CMS Directory 1.5 - 'assets/external/data2.php cate' SQL Injection Google Dork: inurl:"assets/external/data.php" Date: 14 Feb 2019 Exploit Author: Deyaa Muhammad Author EMail: contact at deyaa.me Author Blog: http://deyaa.me Vendor Homepage: https://themerig.com/...
CVE-2018-16455
PHP Scripts Mall Market Place Script 1.0.1 allows XSS via a keyword...
CVE-2018-16455
PHP Scripts Mall Market Place Script 1.0.1 allows XSS via a keyword...