CVE-2019-17285

...

[20210305] - Core - Input validation within the template manager

Missing input validation within the template manager...

MPC Sharj 3.11.1 Arbitrary File Download

Exploit title : MPC Sharj 3.11.1 - Arbitrary File Download Exploit Author : SajjadBnd Date : 2020-05-02 Software Link : http://dl.nuller.ir/mpc-sharj-vr3.11.1betawww.nuller.ir.zip Tested on : Ubuntu 19.10 Version : 3.11.1 Beta DESCRIPTION MPC Sharj is a free open source script for creating sim ca...

millsupply.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1156207 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

fid.bigship.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1155544 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

beltranssat.by Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1155518 Security Researcher ELProfesor Helped patch 2830 vulnerabilities Received 8 Coordinated Disclosure badges Received 107 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting beltranssat.by website...

GaussDB: Configure the Maximum Number of Files that Can Be Opened in Processes

If the maximum number of files that can be opened in processes is too small, SQL operations will fail once the maximum number is exceeded. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

python-rpm-generators bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

comune.cadrezzateconosmate.va.it Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1151460 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

correio.rac.com.br Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1150006 Security Researcher DkilerS2 Helped patch 112 vulnerabilities Received 4 Coordinated Disclosure badges Received 8 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting correio.rac.com.br website...

server-hardware.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1149682 Security Researcher Broly157 Helped patch 1606 vulnerabilities Received 7 Coordinated Disclosure badges Received 15 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting server-hardware.com websi...

Sky File 2.1.0 iOS - Directory Traversal Vulnerability

Exploit for php platform in category web applications Title: Sky File 2.1.0 iOS - Directory Traversal Date: 2020-04-21 Software Link: https://apps.apple.com/us/app/sky-file-wireless-transfer/id1236452210 CVE: N/A Document Title: =============== Sky File v2.1.0 iOS - Multiple Web Vulnerabilities...

NETGEAR D6100 Injection Vulnerability

The NETGEAR D6100 is a wireless modem from NETGEAR. An injection vulnerability exists in versions prior to NETGEAR D6100 1.0.0.500.0.50. The vulnerability arises from a lack of proper validation of user input data by the network system or product during user input operations of constructed...

alisonschwabe.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1148311 Security Researcher Dipu1A Helped patch 998 vulnerabilities Received 5 Coordinated Disclosure badges Received 22 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting alisonschwabe.com website an...

Neowise CarbonFTP 1.4 - Insecure Proprietary Password Encryption Exploit

Title: Neowise CarbonFTP 1.4 - Insecure Proprietary Password Encryption Author: hyp3rlinx Vendor: CVE: CVE-2020-6857 import time, string, sys, argparse, os, codecs Fixed: updated for Python 3, the hex decode function was not working in Python 3 version. This should be compatible for Python 2 and ...

statistikbanken.dk Cross Site Scripting vulnerability OBB-1147182

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

anapa93.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1146731 Security Researcher Yashodar Helped patch 25 vulnerabilities Received 1 Coordinated Disclosure badges Received 1 recommendations , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting anapa93.com website and its...

dozent.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-1146210 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting dozent.net website and its users. Following...

thinkspain.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1145277 Security Researcher 4NCURZE Helped patch 1496 vulnerabilities Received 7 Coordinated Disclosure badges Received 12 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting thinkspain.com website and...

oase-teichbau.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1144588 Security Researcher MitRauch Helped patch 288 vulnerabilities Received 3 Coordinated Disclosure badges Received 5 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting oase-teichbau.de website an...