PT-2020-12991 · Philips · Earlyvue +3

Name of the Vulnerable Software and Affected Versions: Philips IntelliBridge Enterprise IBE versions B.12 and prior Description: The issue concerns the logging of unencrypted user credentials within the transaction logs of the IntelliBridge Enterprise system. These logs are secured behind a...

classe-numerique.fr Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1937 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting classe-numerique.fr website and its users. Following...

PT-2020-2747

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Description The issue is related to errors in handling objects in memory in the Microsoft Server Message Block 3.1.1 SMBv3 protocol. This can allow a remote attacker to gain unauthorized...

New Research: "Privacy Threats in Intimate Relationships"

I just published a new paper with Karen Levy of Cornell: "Privacy Threats in Intimate Relationships." Abstract: This article provides an overview of intimate threats: a class of privacy threats that can arise within our families, romantic partnerships, close friendships, and caregiving...

PT-2020-13614 · Tigera · Calico Enterprise +1

Name of the Vulnerable Software and Affected Versions: Calico versions 3.14.0 and below Calico Enterprise versions 2.8.2 and below Description: The issue allows a compromised pod with sufficient privilege to reconfigure the node's IPv6 interface, enabling the attacker to redirect network traffic...

PT-2020-20206

Name of the Vulnerable Software and Affected Versions Kubernetes versions prior to 1.15.12 Kubernetes versions prior to 1.16.9 Kubernetes versions prior to 1.17.5 Kubernetes versions 1.0 through 1.14 Kubernetes version 1.18.0 Description The issue allows certain authorized users to leak up to 500...

Password Changing After a Breach

This study shows that most people don't change their passwords after a breach, and if they do they change it to a weaker password. Abstract: To protect against misuse of passwords compromised in a breach, consumers should promptly change affected passwords and any similar passwords on other...

mail.belmetal.com.br Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1174608 Security Researcher sagaryadav8742 Helped patch 6 vulnerabilities Received 0 Coordinated Disclosure badges Received 1 recommendations , found a security vulnerability affecting mail.belmetal.com.br website and its users. Following coordinated and responsible...

mailserver2.byteweb.com.br Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1174609 Security Researcher sagaryadav8742 Helped patch 6 vulnerabilities Received 0 Coordinated Disclosure badges Received 1 recommendations , found a security vulnerability affecting mailserver2.byteweb.com.br website and its users. Following coordinated and responsible...

femmesdalsace.fr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1174243 Security Researcher Gh05tPT Helped patch 6901 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting femmesdalsace.fr website...

PT-2020-5646 · Ruby On Rails +3 · Rails +3

Name of the Vulnerable Software and Affected Versions: rails versions 5.0.0 through 5.2.4.2 rails versions 6.0.0 through 6.0.3 Description: A deserialization of untrusted data issue exists, allowing an attacker to potentially leak information from Strong Parameters. The vulnerability is related t...

cert-iq.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1171124 Security Researcher 4NCURZE Helped patch 1551 vulnerabilities Received 7 Coordinated Disclosure badges Received 14 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting cert-iq.de website and its...

malayalasangeetham.info Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1170765 Security Researcher Mughiwara Helped patch 192 vulnerabilities Received 2 Coordinated Disclosure badges Received 4 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting malayalasangeetham.info...

PT-2020-3713

Name of the Vulnerable Software and Affected Versions: Puma versions prior to 3.12.5 Puma versions prior to 4.3.4 Description: The issue is related to the handling of HTTP requests in Puma, a RubyGem for Ruby/Rack applications. An attacker could smuggle an HTTP response by using an invalid...

dgtprojects.biz Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1166180 Security Researcher geeknik Helped patch 8938 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting dgtprojects.biz website an...

nepaltrekkingtouroperators.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1165432 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

PT-2020-5466 · Intel +6 · Dpdk +6

Name of the Vulnerable Software and Affected Versions: DPDK versions 19.11 and above Description: A vulnerability was found that allows a malicious container with direct access to the vhost-user socket to cause a resource leak by sending VHOST USER GET INFLIGHT FD messages. This can result in a...

talad.me Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1164142 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting talad.me website and its...

colectiaestera.ro Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1164121 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting colectiaestera.ro website...

atlantico.fr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1164111 Security Researcher mominroaim Helped patch 67 vulnerabilities Received 2 Coordinated Disclosure badges Received 5 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting atlantico.fr website and i...