Apple iOS Status Bar Component Information Disclosure Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices, and the Status Bar is one of the status bar components. A security vulnerability exists in the Status Bar component in versions of Apple iOS prior to 12. An attacker in close physical proximity could use the vulnerability to...

usedcars.mitula.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-676839 Description| Value ---|--- Affected Website:| usedcars.mitula.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Insecure Defaults

libcurl.so is vulnerable to insecure defaults. The library re-uses connections rather than create new connections, allowing a malicious user to connect to other users by sending requests through a re-used connection, leading to an authentication bypass in certain connections that require...

urbanautomotive-showroom.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-654103 Description| Value ---|--- Affected Website:| urbanautomotive-showroom.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

One-Lin3r v1.1 - Gives You One-Liners That Aids In Penetration Testing Operations

One-Lin3r is simple and light-weight framework inspired by the web-delivery module in Metasploit. It consists of various one-liners that aids in penetration testing operations: Reverser : Give it IP & port and it returns a reverse shell liner ready for copy & paste. Dropper : Give it an...

vankesteren.ca XSS vulnerability

Open Bug Bounty ID: OBB-604026 Description| Value ---|--- Affected Website:| vankesteren.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Youxin Used Car App Has Logic Design Flaws

Youxin Used Car APP is a cell phone used car information buying service software. There is a logical design vulnerability in Ushin Used Car APP. Attackers can bombard the client with SMS messages by replaying packets that send CAPTCHA without restriction...

CVE-2017-4129

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

CVE-2017-4128

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

CVE-2017-4115

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

CVE-2017-4076

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

Linux kernel denial of service vulnerability (CNVD-2018-04627)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the fs/ocfs2/cluster/nodemanager.c file in the Linux kernel, which arises from a program failing to use a requested mutex.A local...

PT-2018-8257

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server ATS versions 6.2.0 and prior Apache Traffic Server ATS versions 7.0.0 and prior Description: The issue arises from the handling of the Host header and line folding, potentially causing problems when interacting with...

Used Car Home App Has SMS Bombing Vulnerability

Used Car Home App is a mobile application platform that helps users to buy and sell used cars. The Used Car House APP version 6.1.4 suffers from an SMS bombing vulnerability that allows an attacker to traverse a cell phone number and consume server resources and cause a denial of service by sendi...

porscheofomaha.com XSS vulnerability

Open Bug Bounty ID: OBB-450246 Description| Value ---|--- Affected Website:| porscheofomaha.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

porscheofstratham.com XSS vulnerability

Open Bug Bounty ID: OBB-436233 Description| Value ---|--- Affected Website:| porscheofstratham.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-2692: Improper Neutralization of Special Elements used in a Command

The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earlier versions,ALE-L21C464B150 and earlier versions,ALE-L21C636B200 and earlier...

usedbusesforsale.net XSS vulnerability

Open Bug Bounty ID: OBB-388416 Description| Value ---|--- Affected Website:| usedbusesforsale.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

DEBIAN-CVE-2016-9263

WordPress through 4.8.2, when domain-based flashmediaelement.swf sandboxing is not used, allows remote attackers to conduct cross-domain Flash injection XSF attacks by leveraging code contained within the wp-includes/js/mediaelement/flashmediaelement.swf file...

AZL-79072 CVE-2017-15042 affecting package golang 1.25.7-1

An unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires that, during SMTP, the PLAIN auth scheme must only be used on network connections secured with TLS. The original implementation of smtp.PlainAuth in Go 1.0 enforced this requirement, and it was...