ca.havas.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1148018 Security Researcher 4NCURZE Helped patch 1496 vulnerabilities Received 7 Coordinated Disclosure badges Received 12 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting ca.havas.com website and i...

Xinfire TV Player 6.0.1.2 Buffer Overflow

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xinfire TV Player Buffer Overflow', 'Description' = %q This module exploits a buffer overflow in Xinfire TV Player Pro and Standard v6.0.1.2.When...

Xinfire DVD Player 5.5.0.0 Buffer Overflow Exploit

This Metasploit module exploits a buffer overflow in Xinfire DVD Player Pro and Standard version 5.5.0.0. When the application is used to import a specially crafted plf file, a buffer overflow occurs allowing arbitrary code execution. Tested successfully on Win7, Win10. This software is similar a...

ajmc.aut.ac.ir Open Redirect vulnerability

Open Bug Bounty ID: OBB-1145464 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting ajmc.aut.ac.ir website and its users. Following...

ayudajurisprudencia.ramajudicial.gov.co Open Redirect vulnerability

Open Bug Bounty ID: OBB-1145392 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting ayudajurisprudencia.ramajudicial.gov.co website and...

Pandora FMS - Ping Authenticated Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Pandora FMS Ping Authenticated Remote Code Execution', 'Description' = %q This module exploits a vulnerability found in Pandora FMS 7.0NG and...

kabuki-anime.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1135491 Security Researcher geeknik Helped patch 8887 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting kabuki-anime.com website a...

Pandora FMS Ping Authenticated Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Pandora FMS Ping Authenticated Remote Code Execution', 'Description' = %q This module exploits a vulnerability found in Pandora FMS 7.0NG and...

Nsauditor 3.2.0.0 - (Name) Denial of Service Exploit

Exploit Title: Nsauditor 3.2.0.0 - 'Name' Denial of Service PoC Discovery by: 0xMoHassan Date: 2020-04-04 Vendor Homepage: http://www.nsauditor.com Software Link: http://www.nsauditor.com/downloads/nsauditorsetup.exe Tested Version: 3.2.0.0 Vulnerability Type: Denial of Service DoS Local Tested o...

Security feature bypass

A security restriction bypass vulnerability has been discovered in Revive Adserver version 5.0.5 by HackerOne user hoangn144. Revive Adserver, like many other applications, requires the logged in user to type the current password in order to change the e-mail address or the password. It was howev...

webstarsolution.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1130458 Security Researcher geeknik Helped patch 8938 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting webstarsolution.com websit...

UliCMS 2020.1 - Persistent Cross-Site Scripting

UliCMS 2020.1 - Persistent Cross-Site Scripting Exploit Title: UliCMS 2020.1 - Persistent Cross-Site Scripting Google Dork: N/A Date: 2019-03-24 Exploit Author: SunCSR Vendor Homepage: https://en.ulicms.de Software Link: https://en.ulicms.de/currentversions.html Version: 2020.1 Tested on: Windows...

ozlamps.com.au Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1121930 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

cleanfrog.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1121210 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting cleanfrog.de website and...

mtv-messtechnik.de Cross Site Scripting vulnerability

Security Researcher kun-fly Helped patch 605 vulnerabilities Received 7 Coordinated Disclosure badges Received 43 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting mtv-messtechnik.de website and its users. Following...

erf-medien.ch Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3691 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting erf-medien.ch website and its users. Following coordinate...

singlepensionscheme.gov.ie Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1099123 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting singlepensionscheme.gov.i...

carpeturn.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1097036 Security Researcher geeknik Helped patch 8899 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting carpeturn.com website and...

AFLplusplus

This is a code repository for AFLplusplus, a tool for fuzz testing and vulnerability discovery. The repository contains various files and directories related to the project, including configuration files, makefiles, and documentation. The repository is organized as follows: .clang-format is a...

photokade.com Cross Site Scripting vulnerability

Security Researcher suraj102 Helped patch 34 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting photokade.com website and its users. Following coordinated and responsible vulnerabilit...