701 matches found
CVE-2021-38603
PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field...
CVE-2021-23419
This affects the package open-graph before 0.2.6. The function parse could be tricked into adding or modifying properties of Object.prototype using a proto or constructor payload...
Backdoor.Win32.Delf.zho Authentication Bypass / Code Execution
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/6b9f5a0512af3ab33c26eaa4bdf94f1f.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Delf.zho Vulnerability: Authentication Bypass RCE Description: The malware listens on...
Trojan.Win32.Gentee.b Insecure Permissions
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/86e63bb63f3baf48ad3bf24c3f5b7e40.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.Gentee.b Vulnerability: Insecure Permissions EoP Description: Trojan creates a vuln dir...
Backdoor.Win32.Anaptix.bd Insecure Permissions
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/9f178de7f9918288d93ac0f065f0aa2f.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Anaptix.bd Vulnerability: Insecure Permissions Description: Anaptix.bd malware create...
Backdoor.Win32.Xel Remote Authentication Buffer Overflow
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/3648c68bfe395fb9980ae547d881572c.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Xel Vulnerability: Remote Authentication Buffer Overflow Description: Xel listens on...
Oracle WebLogic Server Administration Console Handle Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle WebLogic Server Administration Console Handle RCE', 'Description' = %q This module exploits a path traversal and a Java class instantiatio...
bndigital.bn.gov.br Cross Site Scripting vulnerability OBB-1492357
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
blazingbucks.org Cross Site Scripting vulnerability OBB-1485587
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
ifco13.com Cross Site Scripting vulnerability OBB-1485469
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
primvostok.ru Cross Site Scripting vulnerability OBB-1479307
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
A week in security (October 26 – November 1)
We had a very busy week at Malwarebytes Labs. We offered advice on Googles patch for an actively exploited zero-day bug that affects Chrome users, our podcast talked about finding consumer value in Cybersecurity Awareness Month with Jamie Court, we provided guidance about keeping ransomware cash...
lorawan-packet-decoder-0ta6puiniaut.runkit.sh Cross Site Scripting vulnerability OBB-1471068
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
colleenwillits.com Cross Site Scripting vulnerability OBB-1439196
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
mecachisenlamar.com Cross Site Scripting vulnerability OBB-1436477
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
sso.petra.ac.id Cross Site Scripting vulnerability OBB-1399880
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-13345
Summary: CVE-2020-13345 affects GitLab installations with versions starting from 10.8 and beyond, featuring a Reflected XSS on multiple routes . The available connected sources consistently describe the issue as a GitLab XSS vulnerability with no explicit exploitation details. Affected software: ...
CVE-2020-5982
CVE-2020-5982 affects the NVIDIA Windows GPU Display Driver, specifically the kernel-mode layer nvlddmkm.sys scheduler. The vulnerability is described as the software not properly limiting the number/frequency of interactions with an actor, which may lead to a denial of service. The NVIDIA adviso...
easystepflooring.co.uk Cross Site Scripting vulnerability OBB-1373032
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
petroleum.or.kr Cross Site Scripting vulnerability OBB-1353428
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...