AirDisk Pro app cross-site scripting vulnerability (CNVD-2020-25589)

AirDisk Pro app is a mobile application for managing AirDisk Pro wireless storage devices. The program supports document viewing, PDF reading, music playback, image viewing, text editing and file management. A cross-site scripting vulnerability exists in version 5.5.3 of the AirDisk Pro app for...

The vulnerability of the Symfony software platform for developing and managing web applications stems from insufficient validation of input data, allowing attackers to compromise data integrity.

The vulnerability of the Symfony software development and management platform is related to an application error where unvalidated user input is passed as a file. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

Tortoise ORM SQL Injection Vulnerability

Tortoise ORM is an open source object-relational mapper . A SQL injection vulnerability exists in MySQL in Tortoise ORM versions prior to 0.15.23 and prior to 0.16.6. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker...

groscochon.net Open Redirect vulnerability OBB-1146526

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

ria.biz Open Redirect vulnerability

Open Bug Bounty ID: OBB-1146445 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting ria.biz website and its users. Following coordinated...

thebigwave.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-1146381 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting thebigwave.net website and its users. Following...

esinc.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-1146318 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting esinc.net website and its users. Following coordinat...

ducar.carsensor.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-1146294 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting ducar.carsensor.net website and its users. Following...

stjerome.koha.ccsr.qc.ca Open Redirect vulnerability

Open Bug Bounty ID: OBB-1146166 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting stjerome.koha.ccsr.qc.ca website and its users...

coachoutlet-stores.us.org Open Redirect vulnerability

Open Bug Bounty ID: OBB-1145879 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting coachoutlet-stores.us.org website and its users...

ptheshulorg.clhosting.org Open Redirect vulnerability

Open Bug Bounty ID: OBB-1145827 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

go.shopkeeper.ir Open Redirect vulnerability

Open Bug Bounty ID: OBB-1145678 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting go.shopkeeper.ir website and its users. Following...

NETGEAR WAC510 Cross-Site Scripting Vulnerability (CNVD-2020-27296)

The NETGEAR WAC510 is a wireless access point AP from NETGEAR. A cross-site scripting vulnerability exists in the NETGEAR WAC510 prior to version 8.0.1.3, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute...

Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2020-30684)

NETGEAR D8500 and others are products of NETGEAR Corporation.NETGEAR D8500 is a wireless modem.NETGEAR R6250 is a wireless router.NETGEAR R6300 is a wireless router.NETGEAR R6300 is a wireless router. A buffer overflow vulnerability exists in multiple NETGEAR products, which originates when a...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-27211)

NETGEAR RBK20 and others are a wireless router from NETGEAR. A cross-site scripting vulnerability exists in multiple NETGEAR products, which stems from a lack of proper validation of client data by a WEB application and can be exploited by an attacker to execute client code...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-26945)

NETGEAR D7800 and others are products of NETGEAR, Inc.NETGEAR D7800 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR XR500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless...

CVE-2020-10611

Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type confusion condition. Authentication is not required to exploit this...

Denial Of Service (DoS)

The Simple Protocol for Independent Computing Environments SPICE is vulnerable to Denial Of Service DoS. It was found that the libspice component of QEMU-KVM on the host did not validate all pointers provided from a guest system's QXL graphics card driver. A privileged guest user could use this...

soyprogramador.liz.mx Open Redirect vulnerability

Open Bug Bounty ID: OBB-1136523 Security Researcher keritzy Helped patch 2026 vulnerabilities Received 5 Coordinated Disclosure badges Received 4 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting soyprogramador.liz.mx websi...

CVE-2020-7614

npm-programmatic through 0.0.12 is vulnerable to Command Injection.The packages and option properties are concatenated together without any validation and are used by the 'exec' function directly...