aisgroupitalia.it Cross Site Scripting vulnerability OBB-2644453

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

Continue Reading
Cloud data breaches: 4 biggest threats to cloud storage security

Just about anywhere you look, organizations are using the cloud in some form—and they’re not all large enterprises. Small and medium businesses (SMBs) are also reaping the many benefits that the clo ...

Continue Reading
CVE-2022-31386

A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL para ...

Continue Reading
CVE-2022-31390

Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Update function in app/admin/c/TemplateController.php.Read More ...

Continue Reading
CVE-2021-40610

Emlog Pro v 1.0.4 cross-site scripting (XSS) in Emlog Pro background management.Read More ...

Continue Reading
CVE-2021-40668

The Android application HTTP File Server (Version 1.4.1) by 'slowscript' is affected by a path traversal vulnerability that permits arbitrary directory listing, file read, and file write.Read More ...

Continue Reading
CVE-2022-2035

A reflected cross-site scripting (XSS) vulnerability exists in the playerConfUrl parameter in the /defaultui/player/modern.html file for SCORM Engine versions Read More ...

Continue Reading
CVE-2022-23138

ZTE's MF297D product has cryptographic issues vulnerability. Due to the use of weak random values, the security of the device is reduced, and it may face the risk of attack.Read More ...

Continue Reading

Back to Main

Subscribe for the latest news: