Stored Cross-Site Scripting

Description A stored cross-site scripting vulnerability exists within the Gallery View comments functionality. Replication Steps and PoC Preconditions PC1. A project exists. PC2. A table with a sheet containing data exists in the project. PC3. A gallery view exists. PC4. A user with the editor ro...

super-jam.com Cross Site Scripting vulnerability OBB-2627285

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-25267

Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA...

CVE-2021-25267

Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA...

Sophos Firewall 跨站脚本漏洞

Sophos Firewall is a firewall from Sophos UK. A security vulnerability exists in Sophos Firewall versions prior to 19.0 GA that allows an attacker to escalate privileges from Administrator to Super Administrator in Webadmin of Sophos Firewall...

India’s New Super App Has a Privacy Problem

Tata Neu is the country’s latest do-everything app. When users signed up, their personal information was already there...

Shopizer 安全特征问题漏洞

Shopizer is a Java-based open source e-commerce solution from the Shopizer team. A security signature issue vulnerability exists in Shopizer versions 2.0 through 2.17.0, which can be exploited by an attacker to cause a regular administrator to permanently delete a super administrator...

Nintendo: [WiiU/Switch] Remote code execution inside the ENL library

Vulnerability description not provided...

CVE-2021-24987 Super Socializer < 7.13.30 - Reflected Cross-Site Scripting

The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.30 does not sanitise and escape the urls parameter in its thechampsharingcount AJAX action available to both unauthenticated and authenticated users before outputting it back in the response, leading to a...

supercleanmedical.com Cross Site Scripting vulnerability OBB-2488487

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-1201

NULL Pointer Dereference in mrbvmexec with super in GitHub repository mruby/mruby prior to 3.2. This vulnerability is capable of making the mruby interpreter crash, thus affecting the availability of the system...

DEBIAN-CVE-2022-1201

NULL Pointer Dereference in mrbvmexec with super in GitHub repository mruby/mruby prior to 3.2. This vulnerability is capable of making the mruby interpreter crash, thus affecting the availability of the system...

UBUNTU-CVE-2022-1201

NULL Pointer Dereference in mrbvmexec with super in GitHub repository mruby/mruby prior to 3.2. This vulnerability is capable of making the mruby interpreter crash, thus affecting the availability of the system...

CVE-2022-1201

The CVE-2022-1201 issue concerns a NULL Pointer Dereference in mruby/mruby's mrb_vm_exec when using super, impacting the interpreter’s availability for builds prior to 3.2. Affected software is mruby/mruby (pre-3.2). The provided documents confirm the vulnerability exists and that it can crash th...

PT-2022-13708 · Mruby +1 · Mruby +1

Name of the Vulnerable Software and Affected Versions: mruby versions prior to 3.2 Description: The issue is related to a NULL Pointer Dereference in mrb vm exec with super, which can cause the mruby interpreter to crash. This affects the availability of the system. Recommendations: For versions...

NULL Pointer Dereference in mrb_vm_exec with super in mruby/mruby

NULL Pointer Dereference in mrbvmexec with super in GitHub repository mruby/mruby prior to 3.2. This vulnerability is capable of making the mruby interpreter crash, thus affecting the availability of the system...

NULL Pointer Dereference in mrb_vm_exec with super

Description NULL Pointer Dereference in mrbvmexec with super Proof of Concept o13 = Comparable.initialize||0x7f.instanceeval do super rescue caller 0..1.sortby do break end end // PoC.js ./mruby 1.rb Result ASAN:DEADLYSIGNAL =================================================================...

HubSpot Data Breach Ripples Through Crytocurrency Industry

A rogue employee working at HubSpot – used by more than 135,000 and growing customers to manage marketing campaigns and on-board new users – has been fired over a breach that zeroed in on the company’s cryptocurrency customers, the company confirmed on Friday. The breach has rippled through the...

Wenzhou Huyi Information Technology Co., Ltd. has a logic flaw vulnerability in BossCMS

BossCMS is a content management system developed by Wenzhou Huyin Information Technology Co., Ltd. based on self-developed PHP framework MySQL architecture. Ltd. BossCMS has a logic flaw vulnerability, which can be exploited by attackers to elevate ordinary administrators to super administrators...

WordPress Super Socializer plugin <= 7.13.29 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Krzysztof Zając in WordPress Super Socializer plugin versions = 7.13.29. Solution Update the WordPress Super Socializer plugin to the latest available version at least 7.13.30...