OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page

Description The OAuth2/OIDC consent page rendered for display=wap authorize requests reflected several request-derived values into the HTML response without escaping. An attacker who induces a user with an active OpenAM session to follow a crafted authorize link can execute arbitrary JavaScript i...

First Wap: A Surveillance Computer You’ve Never Heard Of

Mother Jones has a long article on surveillance arms manufacturers, their wares, and how they avoid export control laws: Operating from their base in Jakarta, where permissive export laws have allowed their surveillance business to flourish, First Wap's European founders and executives have quiet...

EUVD-2016-8839

Malware in sbrugna...

EUVD-2001-1546

Malware in sbrugna...

EUVD-2007-0792

Malware in sbrugna...

EUVD-2009-3106

Malware in sbrugna...

EUVD-2008-2071

Malware in sbrugna...

EUVD-2016-5519

Malware in sbrugna...

EUVD-2020-14977

Malware in sbrugna...

EUVD-2011-0705

Malware in sbrugna...

EUVD-2001-1545

Malware in sbrugna...

EUVD-2016-8837

Malware in sbrugna...

EUVD-2006-4961

Malware in sbrugna...

EUVD-2009-0400

Malware in sbrugna...

EUVD-2023-52787

Malicious code in bioql PyPI...

CVE-2023-48754

Cross-Site Request Forgery CSRF vulnerability in Wap Nepal Delete Post Revisions In WordPress allows Cross Site Request Forgery.This issue affects Delete Post Revisions In WordPress: from n/a through 4.6...

CVE-2020-22212

SQL Injection in 74cms 3.2.0 via the id parameter to wap/wap-company-show.php...

CVE-2001-1568

CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack...

CVE-2001-1569

Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack...

wap-co-nop-sitiowebsc.azurewebsites.net Cross Site Scripting vulnerability OBB-3852309

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...