PT-2020-5474

Name of the Vulnerable Software and Affected Versions jackson-databind versions through 2.9.10.4 Description A deserialization flaw was discovered in the jackson-databind library. It could allow an unauthenticated user to perform code execution via ignite-jta or quartz-core, specifically through...

PT-2020-18328 · Ethereum · Ethereum Name Service (Ens) Registry

Name of the Vulnerable Software and Affected Versions: Ethereum Name Service ENS registry affected versions not specified Description: A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owner's consent ...

PT-2020-1569 · Openbsd +1 · Opensmtpd +1

Name of the Vulnerable Software and Affected Versions: OpenSMTPD versions 6.6 Description: The issue is related to the smtp mailaddr function in the smtp session.c file of the OpenSMTPD mail daemon, which is used in OpenBSD and other products. It allows remote attackers to execute arbitrary...

hexabiogen.com Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1914 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting hexabiogen.com website and its users. Following...

il.theleisurejob.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1072751 Security Researcher MrRain1996 Helped patch 994 vulnerabilities Received 4 Coordinated Disclosure badges Received 9 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting il.theleisurejob.com...

PT-2020-6287 · Metinfo · Metinfo

Name of the Vulnerable Software and Affected Versions: Metinfo version 7.0.0 Description: The issue is related to a lack of access control in the /app/system/column/admin/index.class.php script of the Metinfo CMS system. This allows a remote attacker to escalate privileges by exploiting the...

PT-2020-1307 · Oracle · Oracle Identity Manager

Name of the Vulnerable Software and Affected Versions: Oracle Identity Manager versions 11.1.2.3.0 through 12.2.1.3.0 Description: The issue is related to inadequate access control in the Advanced Console component of Oracle Identity Manager. It can be exploited by a remote attacker to compromise...

gl.thepropertyjob.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1062890 Security Researcher MrRain1996 Helped patch 959 vulnerabilities Received 4 Coordinated Disclosure badges Received 9 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting gl.thepropertyjob.com...

PT-2019-16107 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 0.9.0-development-20191109 Description: A heap-based buffer overflow issue exists in the function gf isom box parse ex located in isomedia/box funcs.c. Recommendations: For GPAC version 0.8.0, update to a version...

PT-2019-5247 · Graphicsmagick +3 · Graphicsmagick +3

Name of the Vulnerable Software and Affected Versions: GraphicsMagick versions 1.4 snapshot-20191208 Q8 Description: The issue is related to a heap-based buffer over-read in the EncodeImage function. This can allow a remote attacker to gain unauthorized access to information and compromise its...

PT-2019-15975 · Tautulli · Tautulli

Name of the Vulnerable Software and Affected Versions: Tautulli version 2.1.9 Description: The issue allows an attacker to shut down a remote media server due to a CSRF vulnerability in the "/shutdown" API endpoint. Additionally, anonymous access can be achieved in applications lacking a user log...

Multiple Kaspersky Products CVE-2019-15689 DLL Loading Arbitrary Code Execution Vulnerability

Description Multiple Kaspersky Products are prone to an arbitrary code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in a denial of service condition. The following products ar...

mcsdskydb.merton.k12.wi.us Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1020433 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting mcsdskydb.merton.k12.wi....

PT-2019-4216 · Adobe · Media Encoder

Name of the Vulnerable Software and Affected Versions: Adobe Media Encoder versions 13.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability in memory. This could allow a remote attacker to execute arbitrary code on the target system. Recommendations: For Adobe...

mundicar.com Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1911 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting mundicar.com website and its users. Following...

Cisco TelePresence CE Software CVE-2019-15277 Local Privilege Escalation Vulnerability

Description Cisco TelePresence Collaboration Endpoint Software is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary commands with root level privileges. This issue is being tracked by Cisco Bug ID CSCvp93715. Versions prior to Cisco...

ww43.playitpk.biz Cross Site Scripting vulnerability

Security Researcher Ellesig Helped patch 56 vulnerabilities Received 2 Coordinated Disclosure badges Received 1 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting ww43.playitpk.biz website and its users. Following coordinate...

HP Touchpoint Analytics CVE-2019-6333 Unspecfied Local Code Execution Vulnerability

Description HP Touchpoint Analytics is prone to an unspecfied local code-execution vulnerability. A local attacker can leverage this issue to execute arbitrary code in the context of affected application. Failed attempts may lead to denial-of-service conditions. Versions prior to Touchpoint...

apartmentguide.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-975437 Security Researcher rajeshappsec Helped patch 114 vulnerabilities Received 4 Coordinated Disclosure badges Received 17 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting apartmentguide.com...

frankfurt-school.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-972298 Security Researcher Mike777 Helped patch 68 vulnerabilities Received 3 Coordinated Disclosure badges Received 4 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting frankfurt-school.de website an...