EUVD-2009-4170

Malware in sbrugna...

EUVD-2022-33932

Malicious code in bioql PyPI...

CVE-2022-29601

The seminars aka Seminar Manager extension through 4.1.3 for TYPO3 allows SQL Injection...

CISA: Cybersecurity Evaluation Tool (CSET) Seminar Presentation

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

seminar-coaching.at Improper Access Control vulnerability OBB-3781388

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-29601

The seminars aka Seminar Manager extension through 4.1.3 for TYPO3 allows SQL Injection...

CVE-2022-29601

The seminars aka Seminar Manager extension through 4.1.3 for TYPO3 allows SQL Injection...

CVE-2022-29601

The seminars aka Seminar Manager extension through 4.1.3 for TYPO3 allows SQL Injection...

Sql injection

The seminars aka Seminar Manager extension through 4.1.3 for TYPO3 allows SQL Injection...

CVE-2022-29601

The seminars aka Seminar Manager extension through 4.1.3 for TYPO3 allows SQL Injection...

CVE-2022-29601

The CVE-2022-29601 entry applies to TYPO3’s Seminar Manager extension (aka seminars) up to version 4.1.3, which is vulnerable to SQL Injection. The vulnerability stems from inadequate sanitization/cleaning of user-supplied data, enabling an attacker to construct requests that execute arbitrary SQ...

TYPO3 Seminar Manager SQL Injection Vulnerability

TYPO3 is a content management system framework CMS/CMF from the Swiss TYPO3 Association.TYPO3 Seminar Manager 4.1.3 and earlier versions are vulnerable to SQL injection, which stems from inadequate cleaning of user-supplied data. A remote attacker could use this vulnerability to send a specially...

TYPO3 SQL注入漏洞

TYPO3 is a content management system framework CMS/CMF from the Swiss TYPO3 Association.TYPO3 Seminar Manager 4.1.3 and earlier versions are vulnerable to SQL injection, which stems from inadequate cleaning of user-supplied data. A remote attacker could use this vulnerability to send a specially...

seminar-eins5.de Cross Site Scripting vulnerability OBB-2339442

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

seminar-crm.cz Cross Site Scripting vulnerability OBB-1322936

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I'm speaking on "Securing a World of Physically Capable Computers" at the Indian Institute of Science in Bangalore, India on December 12, 2019. The list is maintained on this page...

CVE-2019-15747

SITOS six Build v6.2.1 allows a user with the user role of Seminar Coordinator to escalate their permission to the Systemadministrator role due to insufficient checks on the server side...

Input validation

SITOS six Build v6.2.1 allows a user with the user role of Seminar Coordinator to escalate their permission to the Systemadministrator role due to insufficient checks on the server side...

CVE-2019-15747

CVE-2019-15747 affects SITOS six Build v6.2.1. A user with the Seminar Coordinator role can escalate to System Administrator due to insufficient server-side access checks, enabling privilege escalation. CVSS data in the records shows a high impact (CVSS‑3.1 base score 8.8) but no exploit details ...

An attacker with Office vulnerability propagation FELIXROOT Backdoor-vulnerability warning-the black bar safety net

! One, the attack event details 2017 9 months, in response to Ukrainian attacks, FireEye found FELIXROOT Backdoor this malicious payload, and feedback to our intelligence perception of the customers. The attack activities using some malicious Ukrainian banks document that contains a macro, used t...