CVE-2021-34851

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

The vulnerability of the `Internal::TiffReader::visitDirectory` function in the `tiffvisitor.cpp` file of the Exiv2 media metadata management library, related to the insufficient use of the `assert()` function, allows a malicious actor to cause service failures.

The vulnerability of the Internal::TiffReader::visitDirectory function in the tiffvisitor.cpp file of the Exiv2 media metadata management library is related to the insufficient use of the assert function. Exploiting this vulnerability could allow an attacker to cause service failures...

Grav 跨站请求伪造漏洞

Grav is a flat file CMS that uses Markdown files for content management. A cross-site request forgery vulnerability exists in the scheduler in Grav 1.7.0-rc.17 and earlier versions. An attacker can exploit this vulnerability to execute system commands by tricking an administrator into visiting a...

Design/Logic Flaw

The issue was addressed with improved UI handling. This issue is fixed in watchOS 7.0, Safari 14.0, iOS 14.0 and iPadOS 14.0. Visiting a malicious website may lead to address bar spoofing...

Cross-site Scripting (XSS)

wordpress is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the addLoadEvent function in admin-header.php where an attacker is able to inject malicious script via global variables and get it executed when a user visits the page...

visit-queensland.com.au Cross Site Scripting vulnerability OBB-1438297

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

PT-2020-3792 · Microsoft · Media Foundation +1

Name of the Vulnerable Software and Affected Versions: Media Foundation affected versions not specified Description: An information disclosure issue exists due to improper handling of objects in memory by Media Foundation. This could allow an attacker to obtain information that could further...

visitportugal.com Cross Site Scripting vulnerability OBB-1238278

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

DEBIAN-CVE-2019-11747

The "Forget about this site" feature in the History pane is intended to remove all saved user data that indicates a user has visited a site. This includes removing any HTTP Strict Transport Security HSTS settings received from sites that use it. Due to a bug, sites on the pre-load list also have...

CVE-2019-2052

In VisitPointers of heap.cc, there is a possible out-of-bounds read due to type confusion. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1...

Google Android System heap.cc file buffer overflow vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the VisitPointers of the heap.cc file in Android. The vulnerability stems from a networked system or product performing operations in memory without...

WordPress FormCraft plugin CSRF backdoor access vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A CSRF backdoor access vulnerability exists in the WordPress FormCraft plugin, which can be exploited by an attacker to perform arbitrary operations by inducing the...

visit-introdacqua.it XSS vulnerability

Open Bug Bounty ID: OBB-707732 Description| Value ---|--- Affected Website:| visit-introdacqua.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Employee infects US govt network with malware after visiting 9,000 porn sites

By Uzair Amir Due to the carelessness of an employee, who apparently was a porn fan, the network of the satellite imaging facility, the U.S. Geological Survey USGS at the EROS Center, South Dakota got infected with malware. An audit carried out by the U.S. Department of the Interior’s inspector...

visitoestfold.com XSS vulnerability

Open Bug Bounty ID: OBB-681948 Description| Value ---|--- Affected Website:| visitoestfold.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

josephinesvegetablesnoherbicidesince1982.farmvisit.com XSS vulnerability

Open Bug Bounty ID: OBB-653563 Description| Value ---|--- Affected Website:| josephinesvegetablesnoherbicidesince1982.farmvisit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting /...

WordPress Page Visit Counter plugin <= 4.4 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability found by ThreatPress Security Research Team in WordPress Page Visit Counter plugin versions = 4.4. Solution Update the WordPress Page Visit Counter plugin to the latest available version at least 4.5...

Google Chrome Page Access Status Disclosure Vulnerability

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A security vulnerability exists in Blink in Google Chrome versions prior to 67.0.3396.62. The vulnerability can be exploited by ...

WordPress Page Visit Counter plugin <= 4.0.9 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability found by ThreatPress Research Team in WordPress Page Visit Counter plugin versions = 4.0.9. Solution Update the WordPress Page Visit Counter plugin to the latest available version at least 4.1...

visit-montenegro.com XSS vulnerability

Open Bug Bounty ID: OBB-610871 Description| Value ---|--- Affected Website:| visit-montenegro.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...