13 matches found
CVE-2026-20415
In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10363254; Issue ID: MSV-5617...
EUVD-2026-5132
In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10362725; Issue ID: MSV-5694...
CVE-2026-20413
In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10362725; Issue ID: MSV-5694...
ys-tours.com Improper Access Control vulnerability OBB-3815839
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
MAL-2022-7370 Malicious code in ys-mozi-metrics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22928c2bf616a636fd9bd355579f92c3088f3e8abdd989e18487c4f347d06b50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ys-mozi-metrics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22928c2bf616a636fd9bd355579f92c3088f3e8abdd989e18487c4f347d06b50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview ys-mozi-metrics is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...
ys-eng.jp Cross Site Scripting vulnerability OBB-1383684
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Enquete yS 1.0 SQL Injection Vulnerability
Enquete yS version 1.0 suffers from a remote SQL injection vulnerability. Enquete yS - Full v. 1.0 POST SQL Injection in Panel Admin Risk: High CWE number: CWE-89 Author: Hugo Santiago dos Santos Contact: email protected Date: 08/05/2014 Vendor Homepage:...
Unfixed XSS vulnerability at www.job.com.my
Security researcher YS, has submitted on 29/03/2008 a cross-site-scripting XSS vulnerability affecting www.job.com.my, which at the time of submission ranked 2132652 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is currently...
Unfixed XSS vulnerability at free-software-now.com
Security researcher YS, has submitted on 28/03/2008 a cross-site-scripting XSS vulnerability affecting free-software-now.com, which at the time of submission ranked 129357 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is...
Unfixed XSS vulnerability at free-software-now.com
Security researcher YS, has submitted on 28/03/2008 a cross-site-scripting XSS vulnerability affecting free-software-now.com, which at the time of submission ranked 117080 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/03/2008. It is...
WYYS 1.0 - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/24117/info WÃYS is prone to a cross-site scripting vulnerability. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be...