server-hardware.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1149682 Security Researcher Broly157 Helped patch 1606 vulnerabilities Received 7 Coordinated Disclosure badges Received 15 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting server-hardware.com websi...

Sky File 2.1.0 iOS - Directory Traversal Vulnerability

Exploit for php platform in category web applications Title: Sky File 2.1.0 iOS - Directory Traversal Date: 2020-04-21 Software Link: https://apps.apple.com/us/app/sky-file-wireless-transfer/id1236452210 CVE: N/A Document Title: =============== Sky File v2.1.0 iOS - Multiple Web Vulnerabilities...

NETGEAR D6100 Injection Vulnerability

The NETGEAR D6100 is a wireless modem from NETGEAR. An injection vulnerability exists in versions prior to NETGEAR D6100 1.0.0.500.0.50. The vulnerability arises from a lack of proper validation of user input data by the network system or product during user input operations of constructed...

alisonschwabe.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1148311 Security Researcher Dipu1A Helped patch 998 vulnerabilities Received 5 Coordinated Disclosure badges Received 22 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting alisonschwabe.com website an...

Neowise CarbonFTP 1.4 - Insecure Proprietary Password Encryption Exploit

Title: Neowise CarbonFTP 1.4 - Insecure Proprietary Password Encryption Author: hyp3rlinx Vendor: CVE: CVE-2020-6857 import time, string, sys, argparse, os, codecs Fixed: updated for Python 3, the hex decode function was not working in Python 3 version. This should be compatible for Python 2 and ...

statistikbanken.dk Cross Site Scripting vulnerability OBB-1147182

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

anapa93.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1146731 Security Researcher Yashodar Helped patch 25 vulnerabilities Received 1 Coordinated Disclosure badges Received 1 recommendations , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting anapa93.com website and its...

dozent.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-1146210 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting dozent.net website and its users. Following...

thinkspain.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1145277 Security Researcher 4NCURZE Helped patch 1496 vulnerabilities Received 7 Coordinated Disclosure badges Received 12 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting thinkspain.com website and...

oase-teichbau.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1144588 Security Researcher MitRauch Helped patch 288 vulnerabilities Received 3 Coordinated Disclosure badges Received 5 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting oase-teichbau.de website an...

Exploit for Type Confusion in Mozilla Firefox

SpiderMonkey - CVE-2019-11707 Bug: https://bugs.chromium.org/...

Free Desktop Clock x86 Venetian Blinds Zipper 3.0 - Unicode Stack Overflow (SEH)

Exploit Title: Free Desktop Clock x86 Venetian Blinds Zipper 3.0 - Unicode Stack Overflow SEH Exploit Author: Bobby Cooke Date: 2020-04-11 Vendor: Drive Software Company Vendor Site: http://www.drive-software.com Software Download: http://www.drive-software.com/download/freeclock.exe Tested On:...

foebe-muenchen.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1140132 Security Researcher MajorInfluenza Helped patch 120 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting foebe-muenchen.de website and its users. Followi...

librarything.it Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1138555 Security Researcher g0bl1nsec Helped patch 3754 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting librarything.it website a...

batteryempire.co.uk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1138239 Security Researcher Teamhash Helped patch 330 vulnerabilities Received 3 Coordinated Disclosure badges Received 2 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting batteryempire.co.uk website...

Arbitrary Code Execution

thunderbird/firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML content. Malicious HTML content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird...

Zen Load Balancer Directory Traversal

This module exploits a authenticated directory traversal vulnerability in Zen Load Balancer v3.10.1. The flaw exists in 'index.cgi' not properly handling 'filelog=' parameter which allows a malicious actor to load arbitrary file path. Module Options msf use...

clarionlist.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1133474 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting clarionlist.com website a...

AIDA64 Engineer 6.20.5300 Buffer Overflow

Exploit Title: AIDA64 Engineer - 'Report File' filename Buffer Overflow SEH Date: 2020-04-02 Exploit Author: Hodorsec Version: v6.20.5300 Software Link: http://download.aida64.com/aida64engineer620.exe Vendor Homepage: https://www.aida64.com/products/aida64-engineer Tested on: Win7 x86 SP1 - Buil...

tweaksguide.com Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8505 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting tweaksguide.com website and its users. Following coordinat...