CVE-2021-32504

The CVE-2021-32504 entry maps to the SICK FTMg device vulnerability. Unauthenticated users can access sensitive web URLs via GET, which should be restricted to maintenance users only. The underlying issue is a lack of proper access control for web resources, enabling an attacker to retrieve sensi...

CVE-2022-29057

Fortinet FortiEDR CVE-2022-29057 is a reflected cross-site scripting (XSS) vulnerability arising from improper input neutralization during web page generation in the FortiEDR Management Console. A remote authenticated attacker can exploit this via various endpoints to inject malicious payloads. A...

CVE-2022-30620

The CVE-2022-30620 entry concerns Cellinx Camera (guest-enabled) where an attacker with web access can elevate from guest to administrative privileges by modifying cookie values (notably is_admin and showConfig), enabling changes to camera configuration. Connected sources corroborate privilege es...

botamici.it Cross Site Scripting vulnerability OBB-2792397

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bahnbilder.de Cross Site Scripting vulnerability OBB-2792025

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-31208

Infiray IRAY-A8Z3 1.0.957 webserver is affected by CVE-2022-31208: an endpoint can execute arbitrary commands via the cmd_string URL parameter. Root cause described as improper handling of cmd_string leading to command execution. The vulnerability supports network access with low privileges and n...

zhaobannet.com Cross Site Scripting vulnerability OBB-2785868

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

placeweb.site Cross Site Scripting vulnerability OBB-2785288

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

brigittebox.de Cross Site Scripting vulnerability OBB-2784465

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

artofmusic.nl Cross Site Scripting vulnerability OBB-2780159

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

URVE Web Manager 代码问题漏洞

URVE Web Manager is a website manager from URVE. A security vulnerability exists in URVE Web Manager that can be exploited by attackers to upload files without restriction...

URVE Web Manager 代码问题漏洞

URVE Web Manager is a website manager from URVE. A security vulnerability exists in URVE Web Manager that can be exploited by attackers to upload files without restriction...

phylotaxis.com Cross Site Scripting vulnerability OBB-2772017

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pamiec-nadzieja.org.pl Cross Site Scripting vulnerability OBB-2771859

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Product Show Room Site SQL注入漏洞

Product Show Room Site is a kind of product show room website by Carlo Montero's personal developer. product show room site v1.0 version exists SQL injection vulnerability, the vulnerability originates from the existence of the id parameter in /psrs/?p=products/viewproduct&id SQL injection, an...

lubbers-bouw.nl Cross Site Scripting vulnerability OBB-2769688

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

indian.ru Cross Site Scripting vulnerability OBB-2768926

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hydratinghumanity.org Cross Site Scripting vulnerability OBB-2768833

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

casporting.com Cross Site Scripting vulnerability OBB-2767011

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-33137

The CVE-2022-33137 issue affects Siemens SIMATIC MV500 devices (MV540 H/S, MV550 H/S, MV560 U/X) with all versions before v3.3. The root cause is insufficient session expiration: the web session management does not invalidate session IDs in certain logout scenarios, allowing an authenticated remo...