GHSA-X8XM-WRJQ-5G54 Stakater Forecastle has a directory traversal vulnerability

Stakater Forecastle 1.0.139 and before allows %5C../ directory traversal in the website component...

seahorizon.me Open Redirect vulnerability OBB-3928118

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-40297

Stakater Forecastle 1.0.139 and before allows %5C../ directory traversal in the website component...

CVE-2023-40297

CVE-2023-40297 affects Stakater Forecastle 1.0.139 and earlier. The vulnerability is a directory traversal flaw in the website component, enabled by insufficient validation of URL paths (e.g., “\../” sequences), allowing an attacker to access sensitive files. The CVSSv3.1 vector (AV:N/AC:L/PR:N/U...

atksoft.com Cross Site Scripting vulnerability OBB-3928111

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

smccd.edu Cross Site Scripting vulnerability OBB-3928090

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-20369

A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator NSO could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of a parameter in an HTTP request. An...

CVE-2024-20369

CVE-2024-20369 affects Cisco Crosswork Network Services Orchestrator (NSO) Web UI. The issue is improper input validation of a parameter in an HTTP request, enabling an unauthenticated, remote attacker to persuade a user to click a crafted link and be redirected to a malicious website. Documented...

nicheconsulttz.com Cross Site Scripting vulnerability OBB-3928056

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rallies.info Cross Site Scripting vulnerability OBB-3928019

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ahmedandcoproperties.com Cross Site Scripting vulnerability OBB-3927949

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The software for Vinteo Client is vulnerable, allowing attackers to carry out XSS attacks.

The vulnerability of the Vinteo Client video conferencing software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the CMS system Netcat, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the CMS system Netcat is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

Stakater Forecastle 安全漏洞

Stakater Forecastle is a control panel from Stakater that dynamically discovers and provides a launchpad to access applications deployed on Kubernetes. A security vulnerability exists in Stakater Forecastle versions 1.0.139 and earlier, which stems from allowing directory traversal in a website...

cultura.gob.es Cross Site Scripting vulnerability OBB-3927910

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

viaeducacao.pt Cross Site Scripting vulnerability OBB-3927896

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ansefbh.org.br Cross Site Scripting vulnerability OBB-3927885

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

valetpointplus.co.uk Cross Site Scripting vulnerability OBB-3927857

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-4773

When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This could have been used to obfuscate a spoofed web site. This vulnerability affects Firefox 126...

CVE-2024-4773

When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This could have been used to obfuscate a spoofed web site. This vulnerability affects Firefox 126...