arekit (>=0.21.0 <=0.22.1), arenets (>=0.23.0 <=0.23.1) +161 more potentially affected by CVE-2021-29599 via tensorflow-gpu (>=1.10.1 <=2.1.1)

tensorflow-gpu PYPI version =1.10.1, =0.21.0, =0.23.0, =0.9.2, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =1.0.0, =1.0.3 - cctv-analysis =0.0.2 - chatbot-nlu =1.0.0 - classitransformers =0.0.1 and more Source cves: CVE-2021-29599 Source advisory: OSV:PYSEC-2021-725...

arekit (>=0.21.0 <=0.22.1), arenets (>=0.23.0 <=0.23.1) +161 more potentially affected by CVE-2021-29598 via tensorflow-gpu (>=1.10.1 <=2.1.1)

tensorflow-gpu PYPI version =1.10.1, =0.21.0, =0.23.0, =0.9.2, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =1.0.0, =1.0.3 - cctv-analysis =0.0.2 - chatbot-nlu =1.0.0 - classitransformers =0.0.1 and more Source cves: CVE-2021-29598 Source advisory: OSV:PYSEC-2021-724...

arekit (>=0.21.0 <=0.22.1), arenets (>=0.23.0 <=0.23.1) +163 more potentially affected by CVE-2021-29568 via tensorflow-gpu (>=1.10.1 <=2.2.0)

tensorflow-gpu PYPI version =1.10.1, =0.21.0, =0.23.0, =0.9.2, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =1.0.0, =1.0.3 - cctv-analysis =0.0.2 - chatbot-nlu =1.0.0 - classitransformers =0.0.1 and more Source cves: CVE-2021-29568 Source advisory: OSV:PYSEC-2021-694...

Mail.ru: Information Disclosure on qa-delivery-srv.plazius.ru

Performance metrics were available at qa-delivery-srv.plazius.ru...

XSS Vulnerability in the CmsEasyQA Reward Q&A System of Siping City Jiuzhou Yitong Technology Co.

CmsEasyQA Reward Q&A System is a php Q&A system developed in PHP+MySQL. CmsEasyQA Reward Q&A System of Siping City Jiuzhou Yitong Technology Co., Ltd. has an XSS vulnerability, which can be exploited by attackers to obtain sensitive information such as user cookies...

novddostest3.qa-apptrana.info.indussecure.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1063720 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

novddostest2.qa-apptrana.info.indussecure.com Cross Site Scripting vulnerability

Security Researcher Gh05tPT Helped patch 6855 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting novddostest2.qa-apptrana.info.indussecure.com website an...

advancebat1005.qa-apptrana.info.indusguard.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1063663 Security Researcher Gh05tPT Helped patch 6884 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

SQL Injection Vulnerability in ASK2 Q&A System Backend uid Parameter

ask2 Q&A system is whatsns product community, providing free version of the open source php Q&A system, integration of paid Q&A system, paid voice Q&A system, comes with a super collection of features, rapid station building, powerful seo optimization. ASK2 Q&A system background uid parameters...

CVE-2017-18605

The gravitate-qa-tracker plugin through 1.2.1 for WordPress has PHP Object Injection...

Design/Logic Flaw

The gravitate-qa-tracker plugin through 1.2.1 for WordPress has PHP Object Injection...

CVE-2017-18605

CVE-2017-18605 affects the gravitate-qa-tracker WordPress plugin up to version 1.2.1, which is vulnerable to PHP Object Injection due to insecure handling of serialized data. Exploitation is reported to be possible over HTTP requests (unauthenticated), enabling object-injection-based impact. Othe...

Question2Answer User Account Creation Vulnerability

Question2Answer is a PHP implementation of the class StackOverflow website question and answer system . A security vulnerability exists in the qa-include/qa-install.php file in Question2Answer versions prior to 1.7.5. A remote attacker can exploit this vulnerability to create multiple user accoun...

CVE-2017-12775

qa-include/qa-install.php in Question2Answer before 1.7.5 allows remote attackers to create multiple user accounts...

Stored Cross-Site Scripting Vulnerability in ASK2 user.php

ASK2 Q&A system belongs to the Beijing Zhengying Network Technology Company's products , is a set of open source php Q&A system , integration of paid Q&A system , paid voice Q&A system . ASK2 user.php has a stored cross-site scripting vulnerability , because the system fails to strictly filter th...

qa-archive-it.org XSS vulnerability

Vulnerable URL: https://www.qa-archive-it.org/organizations/318?fc=metaSubject%3AGay+community%22%3Cbody/onpageshow=%22alert%22--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E%22San+Antonio.=metaPublisher%3AUniversity+of+Texas+at+San+Antonio Details: Description| Value ---|--- Patched:| No Latest che...

Gravitate QA Tracker <= 1.2.1 - Unauthenticated PHP Object Injection

The plugin gravitate-qa-tracker insecurely trusts serialized data submitted over HTTP requests. This opens up the site to a PHP object injection vulnerability potential exploit vector. Attack is exploitable over HTTP requests to sites with the gravitate-qa-tracker Plugin. The original researcher...

Gravitate QA Tracker <= 1.2.1 - Unauthenticated PHP Object Injection

The plugin gravitate-qa-tracker insecurely trusts serialized data submitted over HTTP requests. This opens up the site to a PHP object injection vulnerability potential exploit vector. PoC Attack is exploitable over HTTP requests to sites with the gravitate-qa-tracker Plugin. The original...

Slack: Source code leakage through GIT web access at host '52.91.137.42'

@d0znpp alerted us to the public availability of Git files on a QA server. This lead to the access to files which should have been restricted. We have enforced proper access control, and Slack awarded @d0znpp a $1,500 bounty for bringing the issue to our attention! Thank you!...

chegg.com XSS vulnerability

Vulnerable URL: http://www.chegg.com/study/qa/post Details: Description| Value ---|--- Patched:| Yes, at 12.12.2017 Latest check for patch:| 12.12.2017 07:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2178 Google Pagerank| 7 VIP website status:| Yes Check...