15648 matches found
team-m.at Cross Site Scripting vulnerability OBB-2650871
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-29406
Multiple Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerabilities in DynamicWebLab's WordPress Team Manager plugin = 1.6.9 at WordPress...
Malicious code in purple_team_midway_3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e40f181749a8f708b27116a5ebf463e016a429d79b88a02dce3c38bbdeb65f38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in purple_team_midway_2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1090576e788b78404457c1ebcc9bdc3ad31cd07bafd6331cda384ea540e1ef8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in purple_team_midway (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48e1d2b1fbe20521d638df7232e8617a51354104986647c485570374818b08c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
WordPress Team Manager <= 1.6.9 - Contributor+ Stored Cross-Site Scripting
The plugin does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...
WordPress Team Manager plugin <= 1.6.9 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities were discovered by Ngo Van Thien Patchstack Alliance in the WordPress Team Manager plugin versions = 1.6.9. Solution Deactivate and delete. No reply from the vendor...
[VIDEO] An Inside Look at the RSA 2022 Experience From the Rapid7 Team
!\VIDEO\ An Inside Look at the RSA 2022 Experience From the Rapid7 Teamhttps://blog.rapid7.com/content/images/2022/06/RSAC-2022-experience.jpg The two years since the last RSA Conference have been pretty uneventful. Sure, COVID-19 sent us all to work from home for a little while, but it's not as...
Online Fire Reporting System SQL Injection Vulnerability (CNVD-2022-55741)
Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/admin/?page=teams/ manageteam...
AWS-Threat-Simulation-and-Detection - Playing Around With Stratus Red Team (Cloud Attack Simulation Tool) And SumoLogic
This repository is a documentation of my adventures with Stratus Red Team - a tool for adversary emulation for the cloud. Stratus Red Team is "Atomic Red Team for the cloud, allowing to emulate offensive attack techniques in a granular and self-contained manner. We run the attacks covered in the...
Mozilla: Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10
The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox ESR 91.9. Some of these bugs showed evidence of memory corruption and we presume th...
Mozilla: Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10
The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox ESR 91.9. Some of these bugs showed evidence of memory corruption and we presume th...
CVE-2022-31980
Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/manageteam&id=...
CVE-2022-31981
Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/viewteam&id=...
CVE-2022-31957
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/teams/viewteam.php?id=...
CVE-2022-31957
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/teams/viewteam.php?id=...
CVE-2022-31977
Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleteteam...
CVE-2022-31977
Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleteteam...