thebigwave.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-1146381 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting thebigwave.net website and its users. Following...

esinc.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-1146318 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting esinc.net website and its users. Following coordinat...

ducar.carsensor.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-1146294 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting ducar.carsensor.net website and its users. Following...

stjerome.koha.ccsr.qc.ca Open Redirect vulnerability

Open Bug Bounty ID: OBB-1146166 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting stjerome.koha.ccsr.qc.ca website and its users...

coachoutlet-stores.us.org Open Redirect vulnerability

Open Bug Bounty ID: OBB-1145879 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting coachoutlet-stores.us.org website and its users...

ptheshulorg.clhosting.org Open Redirect vulnerability

Open Bug Bounty ID: OBB-1145827 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

go.shopkeeper.ir Open Redirect vulnerability

Open Bug Bounty ID: OBB-1145678 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting go.shopkeeper.ir website and its users. Following...

NETGEAR WAC510 Cross-Site Scripting Vulnerability (CNVD-2020-27296)

The NETGEAR WAC510 is a wireless access point AP from NETGEAR. A cross-site scripting vulnerability exists in the NETGEAR WAC510 prior to version 8.0.1.3, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute...

Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2020-30684)

NETGEAR D8500 and others are products of NETGEAR Corporation.NETGEAR D8500 is a wireless modem.NETGEAR R6250 is a wireless router.NETGEAR R6300 is a wireless router.NETGEAR R6300 is a wireless router. A buffer overflow vulnerability exists in multiple NETGEAR products, which originates when a...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-27211)

NETGEAR RBK20 and others are a wireless router from NETGEAR. A cross-site scripting vulnerability exists in multiple NETGEAR products, which stems from a lack of proper validation of client data by a WEB application and can be exploited by an attacker to execute client code...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-26945)

NETGEAR D7800 and others are products of NETGEAR, Inc.NETGEAR D7800 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR XR500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless...

CVE-2020-10611

Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type confusion condition. Authentication is not required to exploit this...

Denial Of Service (DoS)

The Simple Protocol for Independent Computing Environments SPICE is vulnerable to Denial Of Service DoS. It was found that the libspice component of QEMU-KVM on the host did not validate all pointers provided from a guest system's QXL graphics card driver. A privileged guest user could use this...

soyprogramador.liz.mx Open Redirect vulnerability

Open Bug Bounty ID: OBB-1136523 Security Researcher keritzy Helped patch 2026 vulnerabilities Received 5 Coordinated Disclosure badges Received 4 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting soyprogramador.liz.mx websi...

CVE-2020-7614

npm-programmatic through 0.0.12 is vulnerable to Command Injection.The packages and option properties are concatenated together without any validation and are used by the 'exec' function directly...

CVE-2020-7614

npm-programmatic through 0.0.12 is vulnerable to Command Injection.The packages and option properties are concatenated together without any validation and are used by the 'exec' function directly...

DEBIAN-CVE-2020-11102

hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because the frame size is not validated against the r/w data length...

ViewVC Cross-Site Scripting Vulnerability (CNVD-2020-33722)

ViewVC is a Web-based CVS, SVN code repository browsing tool . A cross-site scripting vulnerability exists in ViewVC versions prior to 1.1.28 and 1.2.1. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability...

mailer.adart.cz Open Redirect vulnerability

Open Bug Bounty ID: OBB-1131312 Security Researcher mhthnz Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting mailer.adart.cz website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO...

Privilege escalation

An issue was discovered in Deskpro before 2019.8.0. The /api/people endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve sensitive information about all users registered on the system. This includes their full name, privilege, email address, phone number, etc...