lavoricreativi.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-983860 Security Researcher Hchabik Helped patch 2360 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting lavoricreativi.com website a...

easy-clothes.com Cross Site Scripting vulnerability

Security Researcher Rbcafe Helped patch 255 vulnerabilities Received 3 Coordinated Disclosure badges Received 7 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting easy-clothes.com website and its users. Following coordinated...

pk.theofficejob.com Cross Site Scripting vulnerability

Security Researcher garletmarco Helped patch 1540 vulnerabilities Received 4 Coordinated Disclosure badges , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting pk.theofficejob.com website and its users. Following coordinated and responsible...

imexceramic.com Cross Site Scripting vulnerability

Security Researcher KhanJanny Helped patch 2643 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting imexceramic.com website and its users. Following...

tourdekids.cz Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1935 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting tourdekids.cz website and its users. Following...

expediafr.custhelp.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-932964 Security Researcher AmalThamban Helped patch 3 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting expediafr.custhelp.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines...

CVE-2019-10171

It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied in RHEL 7.5. An attacker would still be able to provoke excessive CPU consumption leading to a denial of service...

brusselsjazzweekend.be Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-885239 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting brusselsjazzweekend.be websit...

facade-sur-mesure.fr Cross Site Scripting vulnerability

Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting facade-sur-mesure.fr website and its users. Following...

ehs.uinta1.com Cross Site Scripting vulnerability

Security Researcher Medusa27 Helped patch 2 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting ehs.uinta1.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bount...

qemu-kvm security update

0.12.1.2-2.506.el610.4 - kvm-target-i386-Sanitize-the-XSAVE-related-feature-bits.patch bz1673779 - kvm-slirp-check-sscanf-result-when-emulating-ident.patch bz1689790 - Resolves: bz1673779 RHEL8 VM's do not install on RHEL6 KVM hypervisor - Resolves: bz1689790 CVE-2019-9824 qemu-kvm: QEMU: Slirp:...

floraquatic.com Cross Site Scripting vulnerability

Security Researcher logindenied Helped patch 7927 vulnerabilities Received 8 Coordinated Disclosure badges Received 76 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting floraquatic.com website and its users. Following...

customer.heavyhost.com.br Cross Site Scripting vulnerability

Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting customer.heavyhost.com.br website and its users. Following...

peterjacksons.com Cross Site Scripting vulnerability

Security Researcher calv1n Helped patch 22043 vulnerabilities Received 12 Coordinated Disclosure badges Received 37 recommendations , a holder of 12 badges for responsible and coordinated disclosure, found a security vulnerability affecting peterjacksons.com website and its users. Following...

Amazon Linux 2 : mod_auth_mellon (ALAS-2019-1200)

A vulnerability was found in a previous version of modauthmellon. An open redirect in the logout URL allows requests with backslashes to pass through by assuming that it is a relative URL, while the browsers silently convert backslash characters into forward slashes treating them as an absolute...

PT-2019-2094

Name of the Vulnerable Software and Affected Versions Windows 7 affected versions not specified Windows Server 2008 R2 affected versions not specified Description A remote code execution issue exists in Remote Desktop Services formerly known as Terminal Services due to a kernel Use-After-Free UAF...

Exploit for Improper Authentication in Ellucian Banner_Enterprise_Identity_Services

CVE-2019-8978 Improper Authentication CWE-287 in Ellucian...

PT-2019-2967 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6 Description: A double-free issue exists in the idr remove all function in lib/idr.c. This can be exploited by an unprivileged local attacker to potentially escalate privileges or cause a system crash, resulting in a...

About the security content of Xcode 10.2

About the security content of Xcode 10.2 This document describes the security content of Xcode 10.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Fedora 28 : glibc (2018-916dfe0d86)

This update ensures that valgrind works again without installing glibc debuginfo packages RHBZ1570246. It also addresses a security vulnerability in the mempcpy implementation for the Intel Xeon Phi processors CVE-2018-11237, RHBZ1581275. Furthermore, the switch to libidn2 uses the final upstream...