sz Cross Site Scripting vulnerability OBB-1249327

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

sz-xhdz.com.cn Cross Site Scripting vulnerability OBB-1243028

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Security Bulletin: A vulneraqbility in SQLite affects IBM Cloud Application Performance Managment Response Time Monitoring Agent (CVE-2019-16168)

Summary SQLite is vulnerable to a denial of service, caused by missing validation of a sqlitestat1 sz field in whereLoopAddBtreeIndex in sqlite3.c. By providing specially-crafted input, a remote attacker could exploit this vulnerability to cause the application to crash. Vulnerability Details...

CVE-2019-16168

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlitestat1 sz field, aka a "severe division by zero in the query planner." Mitigation An user can mitigate the risk of this vulnerability by: 1 Avoid using...

SZ NetChat Options Module Cross-Site Scripting Vulnerability

SZ NetChat is an online chat application.Options module is one of the menu modules. A cross-site scripting vulnerability exists in the MyName input field of the Options module in SZ NetChat versions prior to 7.9, which can be exploited by a remote attacker to inject commands that could affect the...

Design/Logic Flaw

SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web frontend...

CVE-2018-20370

SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web frontend...

CVE-2018-20370

SZ NetChat before 7.9 is vulnerable to Cross-Site Scripting in the Options module (MyName input). The root cause is an XSS flaw in the MyName field, allowing a remote attacker to inject inputs that could compromise the enabled HTTP server web frontend. The public references consistently describe ...

NetChat v7.8 - Persistent Cross Site Scripting Vulnerability

Document Title: =============== NetChat v7.8 - Persistent Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2171 Video: https://www.vulnerability-lab.com/getcontent.php?id=2174...

CVE-2017-6230

The CVE-2017-6230 entry concerns Ruckus Networks Solo APs (firmware R110.x or earlier) and SZ managed APs (firmware R5.x or earlier). It describes an authenticated Root Command Injection vulnerability in the web-GUI, enabling an authenticated user to execute privileged commands on affected system...

sz-online.de XSS vulnerability

Open Bug Bounty ID: OBB-557751 Description| Value ---|--- Affected Website:| sz-online.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sz-map.com XSS vulnerability

Open Bug Bounty ID: OBB-484868 Description| Value ---|--- Affected Website:| sz-map.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on...

Tor: Heap corruption via memarea.c

Hello again, There is a potential vulnerability in memarea.c. common/memarea.c: c 230 void 231 memareaallocmemareat area, sizet sz 232 233 memareachunkt chunk = area-first; 234 char result; 235 torassertchunk; 236 CHECKSENTINELchunk; 237 torassertsz nextmem+sz chunk-UMEM+chunk-memsize The...

Saarbrücker Zeitung - SZ mobil - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Saarbrücker Zeitung - SZ mobil published at the 'play' market has multiple vulnerabilities...

YaBBSM 3.0.0 (Offline.php) Remote File Include Vulnerability

No description provided by source. DESCRIPTION Remote file include vuln found by sZ oct 09, 2006 SOFTWARE Supermod 3.0 for yabb VENDOR URL http://www.supermod.org DORK YaBBSM V2.5.0 // Powered by YaBBSM V2.5.0 Based on YABB SE NOTES greetz to: neo-vortex, sk0tie, icez, Solano College CIS students...

YaBBSM 3.0.0 - Offline.php Remote File Inclusion

YaBBSM 3.0.0 - Offline.php Remote File Inclusion DESCRIPTION Remote file include vuln found by sZ oct 09, 2006 SOFTWARE Supermod 3.0 for yabb VENDOR URL http://www.supermod.org DORK YaBBSM V2.5.0 // Powered by YaBBSM V2.5.0 Based on YABB SE NOTES greetz to: neo-vortex, sk0tie, icez, Solano Colleg...

Downstat 1.8 - 'art' Remote File Inclusion

DESCRIPTION: Remote file include vuln found by sZ sept, 8 2006. SOFTWARE: downstat 1.8 VENDOR URL: http://vmist.net/index.php?script=Downstat DORKs: "Login To Downstat 1.8" allinurl:"/downstat/" NOTES: greetz to: neo-vortex, sk0tie, icez. visit @ irc.bluehell.org silenz VULN CODE: ------ admin.ph...

Downstat <= 1.8 (art) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================= Downstat = 1.8 art Remote File Include Vulnerability ======================================================= DESCRIPTION: Remote file include vuln found by sZ sept, 8 2006. SOFTWARE:...