Lucene search
+L

1515 matches found

Openbugbounty
Openbugbounty
added 2023/09/22 11:29 a.m.19 views

melbournepoetsunion.com.au Cross Site Scripting vulnerability OBB-3702880

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
OSV
OSV
added 2023/09/07 1:15 p.m.10 views

CVE-2023-39423

The RDPData.dll file exposes the /irmdata/api/common endpoint that handles session IDs, among other features. By using a UNION SQL operator, an attacker can leak the sessions table, obtain the currently valid sessions and impersonate a currently logged-in user...

9.1CVSS7.4AI score0.00468EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/09/07 12:00 a.m.7 views

PT-2023-26944 · Resort Data Processing +1 · Irm Next Generation +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The RDPData.dll file exposes the "/irmdata/api/common" endpoint that handles session IDs, among other features. By using a UNION SQL operator, an attacker can leak the sessions table, obta...

9.1CVSS9.3AI score0.00468EPSS
SaveExploits0References7
Krebs on Security
Krebs on Security
added 2023/09/01 3:38 p.m.26 views

Why is .US Being Used to Phish So Many of Us?

Domain names ending in ".US" -- the top-level domain for the United States -- are among the most prevalent in phishing scams, new research shows. This is noteworthy because .US is overseen by the U.S. government, which is frequently the target of phishing domains ending in .US. Also, .US domains...

6.9AI score
SaveExploits0
CNNVD
CNNVD
added 2023/08/04 12:00 a.m.11 views

social-media-skeleton SQL Injection Vulnerability

social-media-skeleton is an unfinished social media project implemented in php, css, javascript and html by the individual developer fobybus. A SQL injection vulnerability exists in social-media-skeleton, which stems from the presence of a UNION-based SQL injection vulnerability...

10CVSS8AI score0.01512EPSS
SaveExploits1References3
The Hacker News
The Hacker News
added 2023/07/27 1:25 p.m.153 views

GameOver(lay): Two Severe Linux Vulnerabilities Impact 40% of Ubuntu Users

Cybersecurity researchers have disclosed two high-severity security flaws in the Ubuntu kernel that could pave the way for local privilege escalation attacks. Cloud security firm Wiz, in a report shared with The Hacker News, said the easy-to-exploit shortcomings have the potential to impact 40% o...

8.8CVSS7.8AI score0.49166EPSS
SaveExploits58
Openbugbounty
Openbugbounty
added 2023/07/21 8:45 a.m.15 views

union-stpoelten.at Cross Site Scripting vulnerability OBB-3534544

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
NVD
NVD
added 2023/07/10 4:15 p.m.34 views

CVE-2023-2234

Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host...

8.8CVSS7.7AI score0.00497EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/10 4:15 p.m.32 views

Design/Logic Flaw

Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host...

5.8CVSS8.9AI score0.00497EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/07/10 4:33 a.m.66 views

CVE-2023-2234

The CVE-2023-2234 entry concerns Zephyr RTOS and a Bluetooth HCI host vulnerability described as “union variant confusion” that can let a malicious Bluetooth controller execute arbitrary code on the Zephyr host. Affected component is the Bluetooth HCI host handling union variant selection; the ro...

8.8CVSS7.7AI score0.00497EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/10 4:33 a.m.43 views

CVE-2023-2234 BT HCI host union variant confusion

Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host...

6.8CVSS9.2AI score0.00497EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/07/10 4:33 a.m.15 views

CVE-2023-2234 BT HCI host union variant confusion

Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host...

6.8CVSS7.8AI score0.00497EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/10 4:33 a.m.11 views

CVE-2023-2234 BT HCI host union variant confusion

Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host...

6.8CVSS7.6AI score0.00598EPSS
SaveExploits0References4
Openbugbounty
Openbugbounty
added 2023/06/22 6:00 a.m.9 views

union-stpoelten.at Cross Site Scripting vulnerability OBB-3456789

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2023/06/18 8:55 p.m.12 views

cumbria-golf-union.org.uk Cross Site Scripting vulnerability OBB-3443832

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2023/06/14 12:07 p.m.18 views

leedsunion.intelligentgolf.co.uk Cross Site Scripting vulnerability OBB-3428895

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2023/06/11 8:57 p.m.10 views

union-stpoelten.at Cross Site Scripting vulnerability OBB-3414857

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
zdt
zdt
added 2023/06/07 12:00 a.m.278 views

Expert Job Portal Management System 1.0 SQL Injection Vulnerability

┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐ ┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ┌┘ Vulnerability ┌┘ └───────────────────────────────────────────────────────────────────────────────────────┘┘ : Author : CraCkEr : │...

7.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2023/06/02 4:09 p.m.22 views

leedsunion.intelligentgolf.co.uk Cross Site Scripting vulnerability OBB-3375874

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
OSV
OSV
added 2023/05/15 3:15 p.m.10 views

UBUNTU-CVE-2023-31629

An issue in the sqlounionscope component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.2AI score0.00905EPSS
SaveExploits1References5
Rows per page
Query Builder