Assets from the old step are not properly transferred to a new TR position

Lines of code Vulnerability details Impact The transferAssetsIntoStep function's intent is to serve two purposes: transferring aAssets to a target TR position and moving assets from an old step to a target TR position. However, in practice, assets removed from the old step are not integrated into...

ESPEC MIC多款产品跨站脚本漏洞

ESPEC MIC RT-12N and others are an environmental sensor from ESPEC MIC. A security vulnerability exists in several ESPEC MIC products, which can be exploited by an attacker to execute arbitrary scripts on a logged-in user's web browser. The following products and versions are affected: ESPEC MIC:...

sp.k12.tr Cross Site Scripting vulnerability OBB-3323352

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Linux: BSI TR-02102-4 Encryption Algorithms

Recommended SSH encryption ciphers from TR-02102-4. Per the recommendations, AEADAES128GCM or AEADAES256GCM should be utilized when possible. Other ciphers accepted by the recommendations are aes128-ctr, aes192-ctr, and aes256-ctr. Note: This check fails if any algorithms are found that are not...

Linux: BSI TR-02102-4 3.6 Server Authentication

HostKeyAlgorithms specifies the host key algorithms offered by the server. Note: Ensure your SSH implementation is capable of using the ciphers specified in sshdconfig. This check does not look for pgp-sign-dss as an exception. If this cipher is used, it should have a key length of 3000 Bits / 25...

Linux: BSI TR-02102-4 3.3 Key Exchange Methods

When establishing the SSH connection, keys are exchanged in order to create and exchange shared session keys for authentication and encryption. The following key exchange methods are recommended: diffie-hellman-group-exchange-sha256, diffie-hellman-group15-sha512, diffie-hellman-group16-sha512,...

SUSE CVE-2008-5712

The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service application crash via 1 a long COLOR attribute in an HR element; or a long a BGCOLOR or b BORDERCOLOR attribute in a 2 TABLE, 3 TD, or 4 TR element. NOTE: the FONT vector is already covered by CVE-2008-451...

SUSE CVE-2017-0357

A heap-overflow flaw exists in the -tr loader of iucode-tool starting with v1.4 and before v2.1.1, potentially leading to SIGSEGV, or heap corruption...

tr-endo.com Cross Site Scripting vulnerability OBB-3166873

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tr-rumaila.com Cross Site Scripting vulnerability OBB-3166875

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2022-4247 Malicious code in l10n-tr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8333b4ef7f485b58aa75475568fa8bc8d47d5de7f77e503d32f4add656fb4fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-666 Malicious code in @tr-digital/react-rehydrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2599cb34105baaf5c4b9d139c06458eb3358bd0ab2b874bbcedb2e87e4176f51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

tr-v.ru Cross Site Scripting vulnerability OBB-2371676

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tr-imagination.com Improper Access Control vulnerability OBB-2270822

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pmb.sm.k12.tr Cross Site Scripting vulnerability OBB-2227175

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kp.k12.tr Improper Access Control vulnerability OBB-2202015

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress TR Easy Google Analytics plugin <= 1.0.0 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by iohex and WPScanTeam in WordPress TR Easy Google Analytics plugin versions = 1.0.0. Solution This plugin has been closed as of October 23, 2018 and is not available for download. Reason: Guideline Violation...

CVE-2020-27692

The Relish Verve Connect VH510 device with firmware before 1.0.1.6L0516 contains multiple CSRF vulnerabilities within its web management portal. Attackers can, for example, use this to update the TR-069 configuration server settings responsible for managing devices remotely. This makes it possibl...

Cross site request forgery (csrf)

The Relish Verve Connect VH510 device with firmware before 1.0.1.6L0516 contains multiple CSRF vulnerabilities within its web management portal. Attackers can, for example, use this to update the TR-069 configuration server settings responsible for managing devices remotely. This makes it possibl...

CVE-2020-27692

The Relish Verve Connect VH510 device with firmware before 1.0.1.6L0516 contains multiple CSRF vulnerabilities within its web management portal. Attackers can, for example, use this to update the TR-069 configuration server settings responsible for managing devices remotely. This makes it possibl...