5203 matches found
All Vulnerabilities for mkvcinemas.tube Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Design/Logic Flaw
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could allow an attacker administrator level access to a device...
CVE-2021-22764
CVE-2021-22764 is an improper authentication vulnerability affecting Schneider Electric PowerLogic PM55xx, PM8ECC, EGX100, and EGX300. The issue can cause loss of connectivity to the device over Modbus TCP when an attacker sends a specially crafted HTTP request. Public documents identify the affe...
All Vulnerabilities for s240.oum.edu.my Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
All Vulnerabilities for moodle.hum.umss.edu.bo Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| moodle.hum.umss.edu.bo ---|--- Open Bug...
All Vulnerabilities for frgp.cvg.utn.edu.ar Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| frgp.cvg.utn.edu.ar ---|--- Open Bug...
gettyimages.in Cross Site Scripting vulnerability OBB-1969566
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| gettyimages.in ---|--- Open Bug Bounty...
All Vulnerabilities for dhrs.gov.ky Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| dhrs.gov.ky ---|--- Open Bug Bounty...
CVE-2021-25252
creationtimestamp| type| source ---|---|--- 2021-03-03 18:45:34+00:00| seen| https://t.me/cibsecurity/24393...
jpeg-xl 0.3.1 Memory Corruption Vulnerability
Multiple Vulnerabilities in jpeg-xl =================================== CVE: CVE-2021-27804 Highest Severity Rating: High Confirmed Affected Versions: jpeg-xl v0.3.1 and earlier Vendor: Joint Photographic Experts Group JPEG Vendor URL: https://gitlab.com/wg1/jpeg-xl Summary and Impact...
chambermaster.com Cross Site Scripting vulnerability OBB-1935137
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| chambermaster.com ---|--- Open Bug Boun...
tvguide.co.uk Cross Site Scripting vulnerability OBB-1897492
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| tvguide.co.uk ---|--- Open Bug Bounty...
February 9, 2021—KB4601354 (OS Build 17134.2026) - EXPIRED
None None...
Schneider Electric EcoStruxure Power Build-Rapsody (Update A)
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Schneider Electric Equipment: EcoStruxure Power Build-Rapsody Vulnerability: Unrestricted Upload of File with Dangerous Type 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...
Glassdoor: Dom XSS Rootkit on [https://www.glassdoor.com/]
The report was vulnerable to DOM-based XSS via sc.keyword on https://www.glassdoor.com/Job/jobs.htm?sc.keyword=test and got resolved by another report 1064892. Thanks, @4peace for your submission...
Path traversal
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' Vulnerability Type vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules see security notification for affected versions,...
CVE-2020-7549
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules see security notification for affected versions, that could cause denial of HTTP and FTP...
CVE-2020-7535
CVE-2020-7535 describes a CWE-22 path traversal vulnerability in the Web Server of Schneider Electric Modicon M340, including Legacy Offers Modicon Quantum and Modicon Premium and related Communication Modules. The Red Hat/NVD entries and vendor advisories reiterate that sending a specially craft...
RHSA-2020:2414
creationtimestamp| type| source ---|---|--- 2020-12-09 07:32:10+00:00| seen| https://t.me/cibsecurity/17446...
CVE-2020-7545
A CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software see security notification for version information that could allow for arbitrary code execution on the server when an authorized user access an affected webpage...