CVE-2022-2105

CVE-2022-2105 affects Secheron SEPCOS Control and Protection Relay. Affected firmware: SEPCOS Single Package before 1.23.22, before 1.24.8, and before 1.25.3. Vulnerability: Improper Enforcement of Behavioral Workflow (CWE-841) allowing bypass of client-side JavaScript controls to change credenti...

IBM Jazz Team Server 安全漏洞

IBM Jazz Team Server is an application server from IBM America, Inc. provides base services that enable a group of tools to work together as a single logical server and includes any number of Jazz Team Server Extensions that provide tool-specific functionality.IBM Jazz Team Server is vulnerable t...

directorio-de-alimentacion.com Cross Site Scripting vulnerability OBB-2662981

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

21stbranding.com Cross Site Scripting vulnerability OBB-2662261

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

You can be tracked online using your Chrome browser extensions

A researcher has found a way to generate a fingerprint of your device from your installed Google Chrome extensions, and then use that fingerprint to track you online. Fingerprinting is a way of figuring out what makes your device unique and then using that to identify you as you move around the...

Hindu Matrimonial Script 安全漏洞

PHP Matrimonial Script Hindu Matrimonial Script is an online matrimonial service website from PHP Matrimonial Script India. A security vulnerability exists in Hindu Matrimonial Script, which stems from improperly managed permissions in /admin/searchview.php...

phpIPAM 1.4.5 Remote Code Execution

Exploit Title: phpIPAM 1.4.5 - Remote Code Execution RCE Authenticated Date: 2022-04-10 Exploit Author: Guilherme '@behiNdyk1' Alves Vendor Homepage: https://phpipam.net/ Software Link: https://github.com/phpipam/phpipam/releases/tag/v1.4.5 Version: 1.4.5 Tested on: Linux Ubuntu 20.04.3 LTS...

kischuni.de Cross Site Scripting vulnerability OBB-2656092

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

studiogi-arredamento.it Cross Site Scripting vulnerability OBB-2654438

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

u5cms 跨站脚本漏洞

u5cms is u5cms open source a medium-sized web content management system . u5cms 8.3.5 version of a security vulnerability , the vulnerability stems from the default home page does not check the user input parameters are legitimate , an attacker can use this vulnerability to malicious script...

link.springer.com.library.neu.edu.tr Cross Site Scripting vulnerability OBB-2651222

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cloudflare Saw Record-Breaking DDoS Attack Peaking at 26 Million Request Per Second

Cloudflare on Tuesday disclosed that it had acted to prevent a record-setting 26 million request per second RPS distributed denial-of-service DDoS attack last week, making it the largest HTTPS DDoS attack detected to date. The web performance and security company said the attack was directed...

CVE-2022-1969

CVE-2022-1969 (WordPress Mobile Browser Color Select plugin) describes a Cross-Site Request Forgery vulnerability in versions up to 1.0.1, caused by missing or incorrect nonce validation on the admin_update_data() function. The issue allows unauthenticated attackers to induce an administrator to ...

CVE-2022-31398

CVE-2022-31398 is a cross-site scripting (XSS) vulnerability in HelpDeskZ v2.0.2, specifically involving /staff/tools/custom-fields. The root cause is a lack of parameter filtering/escaping in the email name field, enabling an attacker to inject arbitrary web scripts or HTML. Impact is limited to...

dr-fehlert.de Cross Site Scripting vulnerability OBB-2648635

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-2035

The CVE-2022-2035 entry describes a reflected XSS in the SCORM Engine’s playerConfUrl parameter in /defaultui/player/modern.html. Affected versions are SCORM Engine < 20.1.45.914 and 21.1.x

designbiz.com Cross Site Scripting vulnerability OBB-2643423

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tualityphysicians.com Cross Site Scripting vulnerability OBB-2640076

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kas.de Cross Site Scripting vulnerability OBB-2636208

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Bypass filter - Stored XSS in Resources

Description Website does incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. This fix for this bug https://huntr.dev/bounties/dcf87c0b-6188-4817-8798-ef1e2581b15a/ can be bypassed using bellow payload...