PT-2019-12089 · Siemens · Simatic Hmi Panels +13

Name of the Vulnerable Software and Affected Versions: SIMATIC CP 1626 All versions SIMATIC ET 200SP Open Controller CPU 1515SP PC incl. SIPLUS variants All versions V20.8 SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions V20.8 SIMATIC HMI Panel incl. SIPLUS...

Microsoft Windows File Signature CVE-2019-1163 Security Bypass Vulnerability

Description Microsoft Windows is prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for...

Microsoft Windows Remote Desktop Services CVE-2019-1222 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft Windows 10 Version 1803 f...

Intel® RAID Web Console 2 Advisory

Summary: Intel has identified a potential vulnerability in the Intel® RAID Web Console 2 RWC2. Intel has issued a Product Discontinuation notice for RWC2. Intel recommends that users uninstall Intel® RWC2, then install RAID Web Console 3 RWC3. Vulnerability Details: CVEID: CVE-2019-0173...

Evaluating the NSA's Telephony Metadata Program

Interesting analysis: "Examining the Anomalies, Explaining the Value: Should the USA FREEDOM Act's Metadata Program be Extended?" by Susan Landau and Asaf Lubin. Abstract: The telephony metadata program which was authorized under Section 215 of the PATRIOT Act, remains one of the most controversi...

barevnenitky.cz Cross Site Scripting vulnerability

Security Researcher MitRauch Helped patch 270 vulnerabilities Received 3 Coordinated Disclosure badges Received 5 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting barevnenitky.cz website and its users. Following coordinate...

gundogcentral.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-931997 Security Researcher KhanJanny Helped patch 3072 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting gundogcentral.com website...

playretrogames.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-931327 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting playretrogames.com website...

soltner.fr Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3650 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting soltner.fr website and its users. Following coordinated a...

journals.library.columbia.edu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-930785 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

sallecortot.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-930668 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting sallecortot.com website an...

princesselizabeth.org Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3650 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting princesselizabeth.org website and its users. Following...

voluncorp.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-930003 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting voluncorp.com website and...

rugbyready.worldrugby.org Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-928916 Security Researcher KhanJanny Helped patch 3072 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting rugbyready.worldrugby.org...

PT-2019-4732 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.7 through 6.9 Wind River VxWorks version vx7 Description: The issue is related to errors in the TCP Urgent Pointer state during the "connect" operation to a remote host. Exploitation of this issue may allow a...

qoly.jp Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-928314 Security Researcher IAMMUSTAFA Helped patch 521 vulnerabilities Received 9 Coordinated Disclosure badges Received 51 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting qoly.jp website and its...

coxsackie-athens.org Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-928076 Security Researcher kprankawat Helped patch 13 vulnerabilities Received 1 Coordinated Disclosure badges Received 4 recommendations , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting coxsackie-athens.org websit...

ACSC Releases Advisory on Password Spraying Attacks

The Australian Cyber Security Centre ACSC has released an advisory on password spraying attacks. Password spraying is a type of brute-force attack in which a malicious actor uses a single password against targeted user accounts before moving on to attempt a second password, and so on. This...

PT-2019-13785 · Adplug Team · Adplug

Name of the Vulnerable Software and Affected Versions: AdPlug version 2.3.1 Description: The issue is a heap-based buffer overflow in the CdtmLoader::load function located in dtm.cpp. Recommendations: For AdPlug version 2.3.1, consider avoiding the use of the CdtmLoader::load function until a pat...

lillnord.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-926957 Security Researcher geeknik Helped patch 8957 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting lillnord.de website and its...