ARM mbedTLS Design Vulnerability

ARM mbedTLS is a product from ARM UK that provides secure communication and encryption capabilities for mbed products. A security vulnerability exists in the 'mbedtlssslgetverifyresult' function in ARM mbedTLS version 2.7.0 and earlier, which stems from the program's failure to properly sign...

DEBIAN-CVE-2017-5438

A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

Chrome V8 PromiseAllResolveElementClosure Element Confusion Vulnerability

Exploit for multiple platform in category dos / poc Chrome: V8: PromiseAllResolveElementClosure can cause elements kind confusion The Promise.all method internally uses PromiseAllResolveElementClosure...

saartjeprum.nl XSS vulnerability

Open Bug Bounty ID: OBB-628211 Description| Value ---|--- Affected Website:| saartjeprum.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

doubleavineyards.com XSS vulnerability

Open Bug Bounty ID: OBB-619409 Description| Value ---|--- Affected Website:| doubleavineyards.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

goktx.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-611986 Description| Value ---|--- Affected Website:| goktx.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mundokiriko.com XSS vulnerability

Open Bug Bounty ID: OBB-608877 Description| Value ---|--- Affected Website:| mundokiriko.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

us-army-military-shop.de XSS vulnerability

Open Bug Bounty ID: OBB-602693 Description| Value ---|--- Affected Website:| us-army-military-shop.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

godsdog-skateboards.de XSS vulnerability

Open Bug Bounty ID: OBB-602623 Description| Value ---|--- Affected Website:| godsdog-skateboards.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-4006 · D Link · D-Link Dir-815

Name of the Vulnerable Software and Affected Versions: D-Link DIR-815 REV. B versions through DIR-815 REVB FIRMWARE PATCH 2.07.B01 Description: The issue exists due to inadequate protection of the web page structure in the /htdocs/webinc/js/info.php component of the D-Link DIR-815 REV. B router's...

tresfantextil.com XSS vulnerability

Open Bug Bounty ID: OBB-600468 Description| Value ---|--- Affected Website:| tresfantextil.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Low: zsh

Issue Overview: NULL dereference in cd in sh compatibility mode under given circumstances In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no argument if HOME is not set. CVE-2017-18205 Null-pointer...

novoidplus.com XSS vulnerability

Open Bug Bounty ID: OBB-591858 Description| Value ---|--- Affected Website:| novoidplus.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

galaiosphoto.gr XSS vulnerability

Open Bug Bounty ID: OBB-583220 Description| Value ---|--- Affected Website:| galaiosphoto.gr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-7548

In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using $PA... on an empty array result...

Null pointer dereference

In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using $PA... on an empty array result...

fashionvalet.com XSS vulnerability

Open Bug Bounty ID: OBB-559681 Description| Value ---|--- Affected Website:| fashionvalet.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

handelsondernemingploem.nl XSS vulnerability

Open Bug Bounty ID: OBB-553259 Description| Value ---|--- Affected Website:| handelsondernemingploem.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors...

CVE-2018-0510

CVE-2018-0510 affects the epg search result viewer (kkcald). A buffer overflow exists in version 0.7.19 and earlier, allowing remote attackers to cause unintended operations or a denial of service. Connected sources jointly confirm this vulnerability and list the affected product as kkcald’s epg ...