batc.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-572077 Description| Value ---|--- Affected Website:| batc.org.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-6229

creationtimestamp| type| source ---|---|--- 2018-02-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44166...

Navarino Infinity Blind SQL Injection / Session Fixation

There is also a blog post about that on: https://medium.com/@evstykas/pwning-ships-vsat-for-fun-and-profit-ba0fe9f42fb3 Vulnerability Security Advisory ======================================================================= title: Multiple vulnerabilities product: All Navarino infinity products...

up.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-562358 Description| Value ---|--- Affected Website:| up.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

CVE-2018-5987

creationtimestamp| type| source ---|---|--- 2018-02-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44131...

February 13, 2018—KB4074598 (Monthly Rollup)

None None...

MGASA-2018-0122 Updated 389-ds-base packages fix security vulnerability

A stack buffer overflow flaw was found in the way 389-ds-base handled certain LDAP search filters. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service CVE-2017-15134...

de1.hostedftp.com XSS vulnerability

On the 19.01.2018 security researcher reported a XSS vulnerability affecting the de1.hostedftp.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 19 January, 201...

CVE-2018-2733

Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion subcomponent: Security. The supported version that is affected is 11.1.2.4.007. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Planning...

OV3 Online Administration 3.0 Parameter Traversal Arbitrary File Access

Summary With the decision to use the OV3 as a platform for your data management, the course is set for scalable, flexible and high-performance applications. Whether you use the OV3 for your internal data management or use it for commercial business applications such as shops, portals, etc. Thanks...

ukguest.com XSS vulnerability

Open Bug Bounty ID: OBB-440455 Description| Value ---|--- Affected Website:| ukguest.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

MGASA-2017-0369 Updated weechat packages fix security vulnerability

It was discovered that logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized CVE-2017-14727...

scrubs-music.de Open Redirect vulnerability

Vulnerable URL: http://scrubs-music.de/netaudio-player/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclos...

skiphop.com XSS vulnerability

Open Bug Bounty ID: OBB-322170 Description| Value ---|--- Affected Website:| skiphop.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-11120

creationtimestamp| type| source ---|---|--- 2017-09-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42784 2018-02-12 08:43:55+00:00| seen| https://t.me/SecLabNews/1509 2018-02-13 13:20:43+00:00| seen| https://t.me/informationsecuritychannel/13126 2026-07-26 07:02:00+00:00| seen|...

xn--oy2b29kmoezta.com XSS vulnerability

Vulnerable URL: http://www.xn--oy2b29kmoezta.com/online.php/'%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E?ptype=view=5487=1=online Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

bmlfh.com XSS vulnerability

Open Bug Bounty ID: OBB-289588 Description| Value ---|--- Affected Website:| bmlfh.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-12940

libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function...

CVE-2017-12941

CVE-2017-12941 affects libunrar.a in UnRAR prior to 5.5.7, due to an out-of-bounds read in the Unpack::Unpack20 function. The SUSE/OSV/OpenVAS entries document a fixed update to UnRAR 5.6.1 that closes this vulnerability. No exploit specifics are provided in the given sources. Remediation: upgrad...

adsdoha.com XSS vulnerability

Vulnerable URL: http://www.adsdoha.com/tags/accomodation-type/shared-accomodation.html/"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 743037 VIP website status:| No Check...