120 matches found
closeup.ics.uci.edu Cross Site Scripting vulnerability OBB-2279574
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Security Advisory 2021-08-01-2 - Stored XSS in hostname UCI variable (CVE-2021-33425)
DESCRIPTION Multiple OpenWrt LuCI templates, including the one shipped by default, integrated the content of the UCI hostname variable without stripping it from malicious JavaScript. This allowed an attacker, which can control the content of the UCI hostname variable, to inject a arbitrary...
ics.uci.edu Improper Access Control vulnerability OBB-1234392
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2019-15513
An issue was discovered in OpenWrt libuci aka Library for the Unified Configuration Interface before 15.05.1 as used on Motorola CX2L MWR04L 1.01 and C1 MWR03 1.01 devices. /tmp/.uci/network locking is mishandled after reception of a long SetWanSettings command, leading to a device hang...
uci.es XSS vulnerability
Open Bug Bounty ID: OBB-702837 Description| Value ---|--- Affected Website:| uci.es Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...
apps.law.uci.edu XSS vulnerability
Open Bug Bounty ID: OBB-628380 Description| Value ---|--- Affected Website:| apps.law.uci.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2015-8972
Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess aka gnuchess before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode...
Stack overflow
Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess aka gnuchess before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode...
CVE-2015-8972
Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess aka gnuchess before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode...
CVE-2015-8972
GNU Chess (gnuchess) is vulnerable to a stack-based buffer overflow in the ValidateMove function (frontend/move.cc) present in version 6.2.3 and earlier; a large input can allow context-dependent attackers to execute arbitrary code, notably when running in UCI mode. Public sources consistently st...
CVE-2015-8972: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess aka gnuchess before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode...
UCI KINOWELT Filme & Tickets - External URLs, SD-card access, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application UCI KINOWELT Filme & Tickets published at the 'play' market has multiple vulnerabilities...
lib.uci.edu XSS vulnerability
Vulnerable URL: http://www.lib.uci.edu/collections/databases-a-to-z.html/"'; Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Googl...
CVE-2014-9212
Multiple cross-site scripting XSS vulnerabilities in Altitude uAgent in Altitude uCI Unified Customer Interaction 7.5 allow remote attackers to inject arbitrary web script or HTML via 1 an email hyperlink or the 2 style parameter in the image attribute section...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Altitude uAgent in Altitude uCI Unified Customer Interaction 7.5 allow remote attackers to inject arbitrary web script or HTML via 1 an email hyperlink or the 2 style parameter in the image attribute section...
CVE-2014-9212
CVE-2014-9212 affects Altitude uAgent/uCI 7.5 with multiple XSS vulnerabilities. An attacker can inject arbitrary script via (1) an email hyperlink or (2) the style parameter in the image attribute section. Affected product: Altitude uAgent Web within Altitude uCI 7.5. CVSS v2 base score 4.3 (Med...
CVE-2014-9212
Multiple cross-site scripting XSS vulnerabilities in Altitude uAgent in Altitude uCI Unified Customer Interaction 7.5 allow remote attackers to inject arbitrary web script or HTML via 1 an email hyperlink or the 2 style parameter in the image attribute section...
CVE-2014-9212: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Altitude uAgent in Altitude uCI Unified Customer Interaction 7.5 allow remote attackers to inject arbitrary web script or HTML via 1 an email hyperlink or the 2 style parameter in the image attribute section...
Altitude uAgent - Altitude uCI 7.5 XSS
Altitude uAgent - Altitude uCI 7.5 Persistent XSS Details ======================================================================================== Product: Altitude uAgent - Altitude uCI 7.5 Security-Risk: High Vendor-URL: http://www.altitude.com CVE-ID:CVE-2014-9212 Credits...
Вышла операционная система OpenWrt 14.07
Встроенная операционная система OpenWrt обновилась до версии 14.07. Эту ОС часто устанавливают на маршрутизаторах как замену проприетарным прошивкам. Основные компоненты OpenWrt включают в себя ядро Linux, util-linux, uClibc и BusyBox. Размер всех компонентов минимизирован, чтобы работать на...