207 matches found
sn-sochi.ru Cross Site Scripting vulnerability OBB-1325067
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
news.sen360.sn Cross Site Scripting vulnerability OBB-1252133
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
NeDi Consulting NeDi Cross-Site Scripting Vulnerability (CNVD-2020-44576)
NeDi Consulting NeDi is a suite of open source software that supports the discovery and mapping of network devices from the Swiss company NeDi Consulting. A cross-site scripting vulnerability exists in NeDi Consulting NeDi version 1.9C. The vulnerability can be exploited to execute arbitrary...
CVE-2020-15029
NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Assets-Management.php sn parameter...
SQL injection vulnerability in DouPHP sn***.php file at Zhangzhou Beanshell Network Technology Co.
DouPHP is a lightweight enterprise website management system based on PHP+Mysql architecture, running on various platforms such as Linux, Windows, MacOSX, Solaris and so on. A SQL injection vulnerability exists in the DouPHP sn.php file of Zhangzhou Beanshell Network Technology Co. Ltd, which can...
SQL Injection Vulnerability in the sn*** Parameters of the School Worry-Free Online Exam System
School Worry-free online examination system adopts the Internet technology, quickly builds the online examination system platform, comprehensively realizes the network, paperless and automation of the examination work. School Worry-free online examination system sn parameters exist SQL injection...
SQL Injection Vulnerability in the sn*** Parameters of the School Worry-Free Online Exam System
School Worry-free online examination system adopts the Internet technology, quickly builds the online examination system platform, comprehensively realizes the network, paperless and automation of the examination work. School Worry-free online examination system sn parameters exist SQL injection...
CVE-2019-17389
In RIOT 2019.07, the MQTT-SN implementation asymcute mishandles errors occurring during a read operation on a UDP socket. The receive loop ends. This allows an attacker via a large packet to prevent a RIOT MQTT-SN client from working until the device is restarted...
Design/Logic Flaw
In RIOT 2019.07, the MQTT-SN implementation asymcute mishandles errors occurring during a read operation on a UDP socket. The receive loop ends. This allows an attacker via a large packet to prevent a RIOT MQTT-SN client from working until the device is restarted...
CVE-2019-17389
In RIOT 2019.07, the MQTT-SN implementation asymcute mishandles errors occurring during a read operation on a UDP socket. The receive loop ends. This allows an attacker via a large packet to prevent a RIOT MQTT-SN client from working until the device is restarted...
CVE-2019-17389
In RIOT 2019.07, the MQTT-SN implementation (asymcute) mishandles errors during a UDP read, causing the receive loop to terminate. This can allow an attacker to disrupt a RIOT MQTT-SN client by sending a large packet, preventing operation until the device is restarted. (CVE-2019-17389)
CVE-2019-16754
RIOT 2019.07 contains a NULL pointer dereference in the MQTT-SN implementation asymcute, potentially allowing an attacker to crash a network node running RIOT. This requires spoofing an MQTT server response. To do so, the attacker needs to know the MQTT MsgID of a pending MQTT protocol message an...
Null pointer dereference
RIOT 2019.07 contains a NULL pointer dereference in the MQTT-SN implementation asymcute, potentially allowing an attacker to crash a network node running RIOT. This requires spoofing an MQTT server response. To do so, the attacker needs to know the MQTT MsgID of a pending MQTT protocol message an...
CVE-2019-16754
RIOT 2019.07 contains a NULL pointer dereference in the MQTT-SN implementation asymcute, potentially allowing an attacker to crash a network node running RIOT. This requires spoofing an MQTT server response. To do so, the attacker needs to know the MQTT MsgID of a pending MQTT protocol message an...
CVE-2019-16754
CVE-2019-16754 affects RIOT as of 2019.07, describing a NULL pointer dereference in the MQTT-SN (asymcute) implementation that can crash a network node. Exploitation requires spoofing a MQTT server response and knowledge of the MQTT MsgID for a pending message, the ephemeral port used by RIOT’s M...
Information disclosure
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service...
CVE-2018-7360
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service...
CVE-2018-7360
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service...
CVE-2018-7360
The CVE-2018-7360 entry concerns the ZTE ZXHN F670 modem (V1.1.10P3T18 and earlier). Affected component: appviahttp service leading to an information exposure vulnerability that could allow an unauthenticated attacker to obtain the GPON SN. The connected CNVD/EUVD entries corroborate that the iss...
news.sen360.sn Open Redirect vulnerability
Open Bug Bounty ID: OBB-692693 Description| Value ---|--- Affected Website:| news.sen360.sn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| hidden until...