61 matches found
webmail.sjteixeira.com.br Cross Site Scripting vulnerability OBB-2342009
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2020-21653
Myucms v2.2.1 contains a server-side request forgery SSRF in the component \controller\index.php, which can be exploited via the sj method...
CVE-2020-21653
Myucms v2.2.1 contains a server-side request forgery SSRF in the component \controller\index.php, which can be exploited via the sj method...
Server side request forgery (ssrf)
Myucms v2.2.1 contains a server-side request forgery SSRF in the component \controller\index.php, which can be exploited via the sj method...
CVE-2020-21653
CVE-2020-21653 affects Myucms v2.2.1, where a server-side request forgery (SSRF) exists in the component \controller\index.php, exploitable via the sj() method. The vulnerability is triggered in the server-side code path and can impact confidentiality and integrity (per CVSS 3.1: High impact on c...
CVE-2020-21653: Server-Side Request Forgery (SSRF)
Myucms v2.2.1 contains a server-side request forgery SSRF in the component \controller\index.php, which can be exploited via the sj method...
sj-machinery.com Cross Site Scripting vulnerability OBB-1432023
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Malicious Package in sj-labc
All versions of sj-labc contain malicious code. The package downloads and runs a script that opens a reverse shell in the system. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package in sj-tw-sec
All versions of sj-tw-sec contain malicious code. The package downloads and runs a script that opens a reverse shell in the system. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package in sj-tw-test-security
All versions of sj-tw-test-security contain malicious code. The package downloads and runs a script that opens a reverse shell in the system. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer...
sj-urc.or.kr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1154858 Security Researcher 10Harshjoshi Helped patch 48 vulnerabilities Received 1 Coordinated Disclosure badges Received 5 recommendations , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting sj-urc.or.kr website and...
sj-r.com XSS vulnerability
Open Bug Bounty ID: OBB-620207 Description| Value ---|--- Affected Website:| sj-r.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
sj-r.com XSS vulnerability
Open Bug Bounty ID: OBB-554220 Description| Value ---|--- Affected Website:| sj-r.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on I...
sj-r.com XSS vulnerability
Open Bug Bounty ID: OBB-499626 Description| Value ---|--- Affected Website:| sj-r.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on I...
sj-r.com XSS vulnerability
Open Bug Bounty ID: OBB-231580 Description| Value ---|--- Affected Website:| sj-r.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
sj-r.com XSS vulnerability
Open Bug Bounty ID: OBB-209527 Description| Value ---|--- Affected Website:| sj-r.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
sj-r.com XSS vulnerability
Vulnerable URL: http://www.sj-r.com/apps/pbcs.dll/search?q=OPENBUGBOUNTY"=0 Details: Description| Value ---|--- Patched:| Yes, at 07.01.2017 Latest check for patch:| 07.01.2017 12:40 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 82033 VIP website status:| No...
CVE-2007-3445
Buffer overflow in SJ Labs SJphone 1.60.303c, running under Windows Mobile 2003 on the Samsung SCH-i730 phone, allows remote attackers to cause a denial of service device hang and call termination via a malformed SIP INVITE message, a different vulnerability than CVE-2007-3351...
Buffer overflow
Buffer overflow in SJ Labs SJphone 1.60.303c, running under Windows Mobile 2003 on the Samsung SCH-i730 phone, allows remote attackers to cause a denial of service device hang and call termination via a malformed SIP INVITE message, a different vulnerability than CVE-2007-3351...
CVE-2007-3445
Buffer overflow in SJ Labs SJphone 1.60.303c, running under Windows Mobile 2003 on the Samsung SCH-i730 phone, allows remote attackers to cause a denial of service device hang and call termination via a malformed SIP INVITE message, a different vulnerability than CVE-2007-3351...