CVE-2021-20676

M-System DL8 series type A DL8-A versions prior to Ver3.0, type B DL8-B versions prior to Ver3.0, type C DL8-C versions prior to Ver3.0, type D DL8-D versions prior to Ver3.0, and type E DL8-E versions prior to Ver3.0 allows remote authenticated attackers to bypass access restriction and conduct...

storiespace.com Cross Site Scripting vulnerability OBB-1377548

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

OS Command Injection

kylin-core-common is vulnerable to OS command injection. The vulnerability exists as it uses a regular expression which provided insufficient blacklist of characters, allowing prohibited characters to be interpreted and executed...

DEBIAN-CVE-2009-3723

asterisk allows calls on prohibited networks...

CVE-2009-3723

asterisk allows calls on prohibited networks...

CVE-2009-3723

asterisk allows calls on prohibited networks...

CVE-2009-3723

asterisk allows calls on prohibited networks...

Code injection

asterisk allows calls on prohibited networks...

CVE-2009-3723

Technical details about CVE-2009-3723 are not publicly provided in the connected documents; monitor for updates from vendors and security trackers for affected versions, impact, and fixes.

PT-2019-6506 · Sangoma · Asterisk

Name of the Vulnerable Software and Affected Versions: Asterisk affected versions not specified Description: The issue allows calls on prohibited networks. There is no information available about the estimated number of potentially affected devices worldwide or real-world incidents where this iss...

CyberArk Software CyberArk Endpoint Privilege Manager Access Bypass Vulnerability

CyberArk Software Endpoint Privilege Manager formerly Viewfinity is a privilege management software from CyberArk Software, Israel. The software includes features such as privilege management, application control, and credential loss protection. A security vulnerability exists in CyberArk Softwar...

“For security reasons DTD is prohibited in this XML document” error in Veeam Backup for Microsoft 365

Challenge Interactions with either SharePoint Online or OneDrive for Business within Veeam Backup for Microsoft 365 fail with either of the following errors: For security reasons DTD is prohibited in this XML document Copy Identity Client Runtime Library IDCRL could not look up the realm...

CVE-2018-0417

A vulnerability in TACACS authentication with Cisco Wireless LAN Controller WLC Software could allow an authenticated, local attacker to perform certain operations within the GUI that are not normally available to that user on the CLI. The vulnerability is due to incorrect parsing of a specific...

marketplace.walmart.com XSS vulnerability

Open Bug Bounty ID: OBB-599228 Description| Value ---|--- Affected Website:| marketplace.walmart.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-0119

A vulnerability in certain authentication controls in the account services of Cisco Spark could allow an authenticated, remote attacker to interact with and view information on an affected device that would normally be prohibited. The vulnerability is due to the improper display of user-account...

CVE-2018-1044

In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings...

KBVault MySQL 0.16a - Arbitrary File Upload

KBVault MySQL 0.16a - Arbitrary File Upload Exploit Title: KBVault MySQL v0.16a - Unauthenticated File Upload to Run Code Google Dork: inurl:"FileExplorer/Explorer.aspx" Date: 2017-06-14 Exploit Author: Fatih Emiral Vendor Homepage: http://kbvaultmysql.codeplex.com/ Software Link:...

OpenDoor - OWASP Directory Access Scanner

This application scans the site directories and find all possible ways to login, empty directories and entry points. Scans conducted in the dictionary that is included in this application. This software is written for informational purposes and is an open source product under the GPL license...

The vulnerability of Google Chrome browser allows a malicious actor to compromise the confidentiality and integrity of protected information.

The vulnerability exists in the API extension for Debugger in the browser/extensions/api/debugger/debuggerapi.cc module in Google Chrome, due to the lack of checking for the URL scheme of the tab before attaching. Exploiting this vulnerability allows malicious actors to circumvent access...

Gentoo Security Advisory GLSA 201406-24

Gentoo Linux Local Security Checks GLSA 201406-24 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...