CVE-2020-25787

CVE-2020-25787 affects Tiny Tiny RSS (tt-rss) prior to 2020-09-16. The issue is that tt-rss does not validate all URLs before requesting them, enabling potential remote code execution as described by multiple sources. A number of connected documents provide concrete details: a known remote code e...

CVE-2020-25788

Tiny Tiny RSS (tt-rss) before 2020-09-16 contains a vulnerability in imgproxy (plugins/af_proxy_http/init.php) where $_REQUEST["url"] is mishandled in an error message. Root cause: improper handling of the URL parameter in error output. Impact indicators in the provided data show high severity (C...

tt-transporte.de Cross Site Scripting vulnerability OBB-1348969

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

tt-rss -- multiple vulnerabilities

tt-rss project reports: The cachedurl feature mishandles JavaScript inside an SVG document. imgproxy in plugins/afproxyhttp/init.php mishandles $REQUEST"url" in an error message. It does not validate all URLs before requesting them. Allows remote attackers to execute arbitrary PHP code via a...

tt-tengtai.com Cross Site Scripting vulnerability OBB-1298696

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

tt-form.de XSS vulnerability

Open Bug Bounty ID: OBB-716258 Description| Value ---|--- Affected Website:| tt-form.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

tt-guru.de XSS vulnerability

Open Bug Bounty ID: OBB-693266 Description| Value ---|--- Affected Website:| tt-guru.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-13410

CVE-2018-13410 affects Info-ZIP Zip 3.0; using -T and -TT can cause a denial of service via an off-by-one error (invalid free and crash) and possibly other impact. It is unclear if an untrusted party can realistically control -TT. Public advisories note vulnerable packages and patches (e.g., zip ...

tt-maximum.com XSS vulnerability

Open Bug Bounty ID: OBB-607710 Description| Value ---|--- Affected Website:| tt-maximum.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tt-shop-schuhmacher.de XSS vulnerability

Open Bug Bounty ID: OBB-603192 Description| Value ---|--- Affected Website:| tt-shop-schuhmacher.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tt-rheinberg.de XSS vulnerability

Open Bug Bounty ID: OBB-559175 Description| Value ---|--- Affected Website:| tt-rheinberg.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sixt.se XSS vulnerability

Vulnerable URL: https://www.sixt.se/gfx/leasing/firmenwagen/angebote/audi-tt.swf?motxt=Jetzt%2520informieren!=javascript:alert%60OPENBUGBOUNTY%60 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

sixt.pl XSS vulnerability

Vulnerable URL: https://www.sixt.pl/gfx/leasing/firmenwagen/angebote/audi-tt.swf?motxt=Jetzt%2520informieren!=javascript:alert%60OPENBUGBOUNTY%60 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Threat Outbreak Alert RuleID24969: Email Messages Distributing Malicious Software on September 11, 2016

Medium Alert ID: 48835 First Published: 2016 September 12 13:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24969 may contain the following files: Name ...

Threat Outbreak Alert RuleID22154: Email Messages Distributing Malicious Software on August 31, 2016

Medium Alert ID: 44562 First Published: 2016 April 8 18:54 GMT Last Updated: 2016 September 1 13:22 GMT Version: 23 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22154 a...

tt-rc.cn XSS vulnerability

Open Bug Bounty ID: OBB-128945 Description| Value ---|--- Affected Website:| tt-rc.cn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID18413: Email Messages Distributing Malicious Software on October 01, 2015

Medium Alert ID: 41324 First Published: 2015 October 1 15:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18413 may contain the following files: Name |...

Threat Outbreak Alert RuleID15770: Email Messages Distributing Malicious Software on June 7, 2015

Medium Alert ID: 39242 First Published: 2015 June 8 17:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15770 may contain the following files: Name | Size...

TT Guest Post Submit 1.0.0 - tt-guest-post-submit-submit.php rootpath Parameter Remote File Inclusion

The TT Guest Post Submit WordPress plugin was affected by a tt-guest-post-submit-submit.php rootpath Parameter Remote File Inclusion security vulnerability...

WordPress TT Guest Post Submit Plugin <= 1.0.0 - Remote File Inclusion

This plugin is prone to a tt-guest-post-submit-submit.php rootpath parameter remote file inclusion vulnerability. Solution Upgrade this plugin...