optics.marine.usf.edu Cross Site Scripting vulnerability OBB-3807380

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Rapid7 and USF: Building a diverse cybersecurity workforce is not optional

By Raj Samani and Peter Kaes Today marks an important day for Rapid7, for the state of Florida, and if we may be so bold, for the future of our industry. The announcement of a joint research lab between Rapid7 and the University of South Florida USF reaffirms our commitment to driving a deeper...

sarasota.wateratlas.usf.edu XSS vulnerability

Open Bug Bounty ID: OBB-429771 Description| Value ---|--- Affected Website:| sarasota.wateratlas.usf.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

UBUNTU-CVE-2014-9898

arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not properly validate input parameters, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28814690 and...

CVE-2014-7395

The USF BCM aka com.appmakr.app193115 application 252847 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The USF BCM aka com.appmakr.app193115 application 252847 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7395

The USF BCM aka com.appmakr.app193115 application 252847 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7395

CVE-2014-7395 affects the USF BCM (com.appmakr.app193115) Android app, where the SSL/TLS certificate chain is not validated by the client. This allows an attacker performing a man-in-the-middle attack to spoof servers and obtain sensitive information via a crafted certificate. The available docum...

CVE-2014-7395: Undefined Security Weakness

The USF BCM aka com.appmakr.app193115 application 252847 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

VLC Media Player USF and Text Subtitles Decoders BOF Vulnerabilities (Windows)

The host is installed with VLC Media Player and is prone to buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: secpodvlcmediaplayerbofvulnfeb11win.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player USF and Text Subtitles Decoders BOF Vulnerabilities Windows Authors: Madhuri ...

VLC Media Player USF and Text Subtitles Decoders BOF Vulnerabilities (Linux)

The host is installed with VLC Media Player and is prone to buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: secpodvlcmediaplayerbofvulnfeb11lin.nasl 7029 2017-08-31 11:51:40Z teissa $ VLC Media Player USF and Text Subtitles Decoders BOF Vulnerabilities Linux Authors: Madhuri D...

Memory corruption

The StripTags function in 1 the USF decoder modules/codec/subtitles/subsdec.c and 2 the Text decoder modules/codec/subtitles/subsusf.c in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "" in an MKV file, which trigger...

CVE-2011-0522

The StripTags function in 1 the USF decoder modules/codec/subtitles/subsdec.c and 2 the Text decoder modules/codec/subtitles/subsusf.c in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "" in an MKV file, which trigger...