701 matches found
Ransom.WannaCry Code Execution
Discovery / credits: Malvuln - John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/84c82835a5d21bbcf75a61706d8ab549.txt Contact: [email protected] Media: twitter.com/malvuln ISR: ApparitionSec Threat: Ransom.WannaCry Vulnerability: Code Execution Description: WannaCry...
jactest.jac-international.jp Cross Site Scripting vulnerability OBB-2555226
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Slackware: Security Advisory (SSA:2022-073-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
soscomputers-re.it Cross Site Scripting vulnerability OBB-2380250
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Backdoor.Win32.Zombam.b Buffer Overflow
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/1e3665a67201209609ae493a2a590bee.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Zombam.b Vulnerability: Remote Stack Buffer Overflow Description: z0mbie's HTTP RAT...
id2.bulldozer.mobi Cross Site Scripting vulnerability OBB-2363008
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Prototype Pollution in object-path-set
The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-OBJECTPATHSET-607908...
web.u1o.xyz Cross Site Scripting vulnerability OBB-2356541
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-23518 Prototype Pollution
The package cached-path-relative before 1.1.0 are vulnerable to Prototype Pollution via the cache variable that is set as instead of Object.createnull in the cachedPathRelative function, which allows access to the parent prototype properties when the object is used to create the cached relative...
vaarwinkel.nl Cross Site Scripting vulnerability OBB-2339453
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
phoenix-demobeta.paradisolms.net Cross Site Scripting vulnerability OBB-2310044
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
CVE-2021-44228-VULN-APP - NOTE: This is a vulnerable virtu...
aula.igotel.net Cross Site Scripting vulnerability OBB-2303879
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Exploit for Command Injection in Tp-Link Tapo_C200_Firmware
CVE-2021-4045 CVE-2021-4045 is a Command Injection vulnerabil...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-42013Reverse-Shell PoC CVE-2021-42013 reverse shell...
CVE-2020-20797
FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php...
lms.8eyond.sg Cross Site Scripting vulnerability OBB-2151531
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
pixologic.com Cross Site Scripting vulnerability OBB-2149072
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Ulfius Web Framework Remote Memory Corruption Exploit
Ulfius Web Framework suffers from a remote memory corruption vulnerability. When parsing malformed HTTP requests, a heap-related initialization bug is triggered resulting in a crash in the server or potentially remote code execution with privileges of the running process. !/usr/bin/python3 guul.p...
abbegm (>=0.1.0, <=0.2.1), abci-rs (>=0.10.0, <=0.11.1) +592 more potentially affected by CVE-2021-38192 via prost-types (>=0.2.3, <=0.7.0)
prost-types CARGO version =0.2.3, =0.1.0, =0.10.0, =0.0.2, =0.0.0, =0.1.3, =0.1.0, =0.17.0, =0.16.0, =0.1.2-alpha.3, =0.8.0, =0.8.0, =0.8.0, =0.11.0 and more Source cves: CVE-2021-38192 Source advisory: OSV:GHSA-X4QM-MCJQ-V2GF...