Unsanitized JavaScript code injection possible in gatsby-plugin-mdx

### Impact The gatsby-plugin-mdx plugin prior to versions 3.15.2 and 2.14.1 passes input through to the `gray-matter` npm package, which is vulnerable to JavaScript injection in its default configurat ...

Continue Reading
Unsanitized JavaScript code injection possible in gatsby-plugin-mdx

### Impact The gatsby-plugin-mdx plugin prior to versions 3.15.2 and 2.14.1 passes input through to the `gray-matter` npm package, which is vulnerable to JavaScript injection in its default configurat ...

Continue Reading
trafficprotect.com Cross Site Scripting vulnerability OBB-2635905

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

Continue Reading
websiteueberwachung.de Cross Site Scripting vulnerability OBB-2635904

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

Continue Reading
www3.detran.ms.gov.br Cross Site Scripting vulnerability OBB-2635902

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

Continue Reading
SMB-Session-Spoofing – Tool To Create A Fake SMB Session

[![](https://blogger.googleusercontent.com/img/a/AVvXsEjFiqtTKKMCShzFHl0nh1VOZ4pPzz5U5IsfKFLdm2HXUDsuw2cvkSalbZuBn7EEtyyRGTO3O8LN-kjNg4zigrz2lgyj3sB4xf1LEdILLCOSzw30N-7WsBlkUJnY-tfJLwhGzmfzM0-LZJs_444 ...

Continue Reading
CVE-2022-26493

Multiple vulnerabilities vulnerability in Drupal SAML SP 2.0 Single Sign On (SSO) - SAML Service Provider in certain non-default configurations allow a malicious user to login as any chosen user. The ...

Continue Reading
CVE-2021-42893

In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization through getSysStatusCfg.Read More ...

Continue Reading

Back to Main

Subscribe for the latest news: