Neowise CarbonFTP 1.4 - Insecure Proprietary Password Encryption Exploit

Title: Neowise CarbonFTP 1.4 - Insecure Proprietary Password Encryption Author: hyp3rlinx Vendor: CVE: CVE-2020-6857 import time, string, sys, argparse, os, codecs Fixed: updated for Python 3, the hex decode function was not working in Python 3 version. This should be compatible for Python 2 and ...

statistikbanken.dk Cross Site Scripting vulnerability OBB-1147182

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

anapa93.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1146731 Security Researcher Yashodar Helped patch 25 vulnerabilities Received 1 Coordinated Disclosure badges Received 1 recommendations , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting anapa93.com website and its...

dozent.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-1146210 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting dozent.net website and its users. Following...

thinkspain.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1145277 Security Researcher 4NCURZE Helped patch 1496 vulnerabilities Received 7 Coordinated Disclosure badges Received 12 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting thinkspain.com website and...

oase-teichbau.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1144588 Security Researcher MitRauch Helped patch 288 vulnerabilities Received 3 Coordinated Disclosure badges Received 5 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting oase-teichbau.de website an...

Exploit for Type Confusion in Mozilla Firefox

SpiderMonkey - CVE-2019-11707 Bug: https://bugs.chromium.org/...

Free Desktop Clock x86 Venetian Blinds Zipper 3.0 - Unicode Stack Overflow (SEH)

Exploit Title: Free Desktop Clock x86 Venetian Blinds Zipper 3.0 - Unicode Stack Overflow SEH Exploit Author: Bobby Cooke Date: 2020-04-11 Vendor: Drive Software Company Vendor Site: http://www.drive-software.com Software Download: http://www.drive-software.com/download/freeclock.exe Tested On:...

foebe-muenchen.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1140132 Security Researcher MajorInfluenza Helped patch 120 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting foebe-muenchen.de website and its users. Followi...

librarything.it Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1138555 Security Researcher g0bl1nsec Helped patch 3754 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting librarything.it website a...

batteryempire.co.uk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1138239 Security Researcher Teamhash Helped patch 330 vulnerabilities Received 3 Coordinated Disclosure badges Received 2 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting batteryempire.co.uk website...

Arbitrary Code Execution

thunderbird/firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML content. Malicious HTML content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird...

Zen Load Balancer Directory Traversal

This module exploits a authenticated directory traversal vulnerability in Zen Load Balancer v3.10.1. The flaw exists in 'index.cgi' not properly handling 'filelog=' parameter which allows a malicious actor to load arbitrary file path. Module Options msf use...

clarionlist.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1133474 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting clarionlist.com website a...

AIDA64 Engineer 6.20.5300 Buffer Overflow

Exploit Title: AIDA64 Engineer - 'Report File' filename Buffer Overflow SEH Date: 2020-04-02 Exploit Author: Hodorsec Version: v6.20.5300 Software Link: http://download.aida64.com/aida64engineer620.exe Vendor Homepage: https://www.aida64.com/products/aida64-engineer Tested on: Win7 x86 SP1 - Buil...

tweaksguide.com Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8505 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting tweaksguide.com website and its users. Following coordinat...

spaceshowertv-thediner.jp Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1126981 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

godolloimuzeum.hu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1126311 Security Researcher g0bl1nsec Helped patch 3748 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting godolloimuzeum.hu website...

brno-jehnice.cz Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1126313 Security Researcher g0bl1nsec Helped patch 3748 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting brno-jehnice.cz website a...

Open-Xchange: Use after free in smtp_server_connection_handle_command

Function smtpserverconnectionhandlecommand in src/lib-smtp/smtp-server-connection.c creates a variable named cmd with cmd = smtpservercommandnewtmpconn, cmdname, cmdparams; It gets used with return cmd == NULL || !cmd-inputlocked; ie cmd-inputlocked dereferences the pointer But we can get to this...