12021 matches found
3ddesign.e-monsite.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-989233 Security Researcher Gh05tPT Helped patch 6873 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting 3ddesign.e-monsite.com...
Joomla 3.4.6 Remote Code Execution
Exploit Title: Joomla 3.4.6 - 'configuration.php' Remote Code Execution Google Dork: N/A Date: 2019-10-02 Exploit Author: Alessandro Groppo @Hacktive Security Vendor Homepage: https//www.joomla.it/ Software Link: https://downloads.joomla.org/it/cms/joomla3/3-4-6 Version: 3.0.0 -- 3.4.6 Tested on:...
Fedora 31 : python38 (2019-d11594bf0a)
This is a beta preview of Python 3.8 Python 3.8 is still in development. This release, 3.8.0b4 is the last of four planned beta release previews. Beta release previews are intended to give the wider community the opportunity to test new features and bug fixes and to prepare their projects to...
Joomla! 3.4.6 - 'configuration.php' Remote Code Execution
Exploit Title: Joomla 3.4.6 - 'configuration.php' Remote Code Execution Google Dork: N/A Date: 2019-10-02 Exploit Author: Alessandro Groppo @Hacktive Security Vendor Homepage: https//www.joomla.it/ Software Link: https://downloads.joomla.org/it/cms/joomla3/3-4-6 Version: 3.0.0 -- 3.4.6 Tested on:...
RUSTSEC-2019-0030 Incorrect implementation of the Streebog hash functions
Internal update-sigma function was implemented incorrectly and depending on debug-assertions it could've caused an incorrect result or panic for certain inputs...
apripleyandco.co.uk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-985389 Security Researcher Sameull Helped patch 272 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting apripleyandco.co.uk website and its users. Following...
Tellion TE01-005H HomeHub Router Remote Configuration Disclosure
!/usr/bin/perl -w Tellion TE01-005H HomeHub Router Remote Configuration Disclosure Copyright 2019 c Todor Donev Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact that Todor Donev is not liabl...
institucional.hcdiputados-ba.gov.ar Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-982251 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2019-9252
In libavc there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-73339042...
inoERP 4.15 SQL Injection
Exploit Title: inoERP 4.15 - 'download' SQL Injection Date: 2019-09-13 Exploit Author: Semen Alexandrovich Lyhin Vendor Homepage: http://inoideas.org/ Version: 4.15 CVE: N/A A malicious query can be sent in base64 encoding to unserialize function. It can be deserialized as an array without any...
Hisilicon HiIpcam V100R003 Remote ADSL - Credentials Disclosure Exploit
!/usr/bin/perl -w Hisilicon HiIpcam V100R003 Remote ADSL Credentials Disclosure Copyright 2019 c Todor Donev Hisilicon HiIpcam V100R003 Remote ADSL Credentials Disclosure ============================================================= Exploit Author: Todor Donev 2019 Disclaimer: This or previous...
libhevc:hevc_dec_fuzzer: Stack-use-after-return in ihevcd_process_thread
Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5176835272343552 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform Id: linux Crash Type: Stack-use-after-return RE...
ir.thehrjob.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-977924 Security Researcher 0xrocky Helped patch 1796 vulnerabilities Received 7 Coordinated Disclosure badges Received 5 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting ir.thehrjob.com website and...
Clones of popular Ad blockers caught ad frauding millions of Chrome users
By Waqas If you are using these two Ad Blockers we suggest removing from your browser right now or be home to extensive ongoing ad fraud. This is a post from HackRead.com Read the original post: Clones of popular Ad blockers caught ad frauding millions of Chrome users...
bd.thesciencejob.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-973199 Security Researcher garletmarco Helped patch 1540 vulnerabilities Received 4 Coordinated Disclosure badges , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting bd.thesciencejob.com website and its users. Followi...
docentes.sesisenaipr.org.br Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-969286 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Are IoT Threats Discussed In The Cybercriminal Underground?
With IoT devices expected to reach tens of billions in the next few years, is it any wonder that cybercriminals are looking for ways to take advantage of this massive attack surface to generate illicit money? A number of Trend Micro researchers from around the globe decided to look into this and...
apertura.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-959150 Security Researcher geeknik Helped patch 8834 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting apertura.com website and it...
