81 matches found
curl: curl --continue-at confusion
Summary: When curl command is used with --continue-at, the --no-clobber is unexpectedly ignored and curl will append the output to the target file, even if it already exists. If --continue-at is used with--remove-on-error it can lead to unexpected removal of the file on early errors. Note that th...
AWS VDP: CVE-2020-5902
CVE ID: CVE-2020-5902 Description: Affected Product: F5 BIG-IP Traffic Management User Interface TMUI Severity: Critical CVSS Score: 9.8 Description: Remote Code Execution RCE vulnerability in undisclosed pages of the TMUI CVE-2020-5902 is a critical vulnerability affecting the BIG-IP Traffic...
ALSA-2024:2758 Moderate: kernel security and bug fix update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation CVE-2023-6240 CVE-2024-25743 hw: amd: Instruction raise VC exception at exit...
travlang.com Cross Site Scripting vulnerability OBB-3854090
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-33949 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: A bug exists in the ext4 file system, specifically in the ext4 clu mapped function when used with bigalloc and inline features. The actual impact and potential for exploitation have not bee...
SUSE: Security Advisory (SUSE-SU-2022:3939-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2022:3491-1 Security update for slurm_20_02
This update for slurm2002 fixes the following issues: - CVE-2022-31251: Fixed security vulnerability in the test package bsc1201674. - CVE-2022-29500: Fixed architectural flaw that can be exploited to allow an unprivileged user to execute arbitrary processes as root bsc1199278. - CVE-2022-29501:...
keys-to-freedom.co.uk Improper Access Control vulnerability OBB-2416077
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Mail.ru: Disclosure of personal support email addresses on 'support-fleet.city-mobil.ru'
IDOR vulnerability in support-fleet.city-mobil.ru allowed to disclose the support staff e-mail addresses...
alex.infomotions.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1159529 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
jccei.kr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1137270 Security Researcher kun-fly Helped patch 668 vulnerabilities Received 7 Coordinated Disclosure badges Received 43 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting jccei.kr website and its...
see-mobile.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1131336 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting see-mobile.com websit...
rosprokat23.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1072989 Security Researcher geeknik Helped patch 8826 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting rosprokat23.ru website and...
jobs.streetsblog.org Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-999007 Security Researcher g0bl1nsec Helped patch 3741 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting jobs.streetsblog.org websi...
CVE-2019-16276
Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling...
ssfw.changsha.gov.cn Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-981800 Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting ssfw.changsha.gov.cn...
kvknorthgoa.icar.gov.in Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-977991 Security Researcher devl00p Helped patch 2974 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting kvknorthgoa.icar.gov.in...
Mozilla: 'Forget about this site' removes sites from pre-loaded HSTS list
The "Forget about this site" feature in the History pane is intended to remove all saved user data that indicates a user has visited a site. This includes removing any HTTP Strict Transport Security HSTS settings received from sites that use it. Due to a bug, sites on the pre-load list also have...
iab.nl XSS vulnerability
Open Bug Bounty ID: OBB-694006 Description| Value ---|--- Affected Website:| iab.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...
henridikongue.lnk.to XSS vulnerability
Open Bug Bounty ID: OBB-652941 Description| Value ---|--- Affected Website:| henridikongue.lnk.to Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...