20626 matches found
Path Traversal in youngerheart/nodeserver
Overview nodeserver is a Achieve node server's domain name resolution and web application's router, this package is vulnerable to Directory Traversal, which may allow access to sensitive files and data on the server. For example, requesting the following URL: /../../etc/passwd would result in...
Path Traversal in rwson/server-static
Overview server-static is a static file server, this package is vulnerable to Directory Traversal, which may allow access to sensitive files and data on the server. For example, requesting the following URL: /../../etc/passwd would result in /etc/passwd leaking...
Dropcontact: Idor for firstpromoter service
An IDOR has been detected on firstpromoter service...
Mail.ru: В самокат имеется возможность просмотра суммы заказа и номера заказа по ID [smart.space]
IDOR in smart.space API allowed to list number and amount of order without attribution to user...
Mail.ru: Возможность просмотра коментариев к чужим обращениям [corporate.city-mobil.ru]
IDOR vulnerability in corporate.city-mobil.ru interface allowed to access a feedback comments of a different users...
BugPoC: Users can Change their Own Email Address
BugPoC uses AWS Cognito for authentication and user pool management. @vasi42 noticed that they were able to use the Cognito API, UpdateUserAttributes, to update their own email address. Calling this API without subsequently calling the VerifyUserAttribute API puts your account into an unverified...
Azbuka Vkusa: Corporate Jira credentials disclosed in public gist
Closed...
Mail.ru: HTTP request smuggling (?) canpol.deti.mail.ru
HTTP request smuggling in canpol.deti.mail.ru led to possibility for non-blind SSRF exploitation with access to serverside api...
Mail.ru: Открытый Confluence и доступы к чату операторов в Skype
Confluence opened to external network without authentication on city-mobil.ru...
restojoe.com Cross Site Scripting vulnerability OBB-1257062
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
8x8: Default Creds Spring Boot Admin
An instance hosting Spring Boot Admin was left exposed with default credentials set...
Dropcontact: Host Header Injection.
Someone could change the redirection when login out from firstpromoter, by tweaking the logout request and using http X-Forwarded-Host, someone could redirect the logout toward a bad place...
Automattic: [api.tumblr.com] Exploiting clickjacking vulnerability to trigger self DOM-based XSS
Hello i have found a clickjacking vulnerability in https://api.tumblr.com/console/ And a self DOM-based XSS In https://api.tumblr.com/console/calls/user/follow/unfollow A attacker can exploit the clickjacking to trigged the self DOM-based XSS Vulnerable URL to clickjacking :...
Zomato: Solr Injection in `user_id` parameter at :/v2/leaderboard_v2.json
@zzzhacker13 identified a Solr Injection on the userid parameter at :/v2/leaderboardv2.json. Our team analyzed internally and found that only fq=injection was possible on the Solr endpoint, hence the Solr injection was of low impact since there was no way to escalate it to exfiltrate data, one...
Mail.ru: Ability to edit the address of any company by its id on [corporate.city-mobil.ru]
IDOR vulnerability in corporate.city-mobil.ru interface allowed to edit the address of any company...
U.S. Dept Of Defense: [CVE-2020-3452] Unauthenticated file read in Cisco ASA
Hey, I found out that host ████████.mil was vulnerable to CVE-2020-3452. You can test it by visiting the URL: https://██████████.mil/+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/portalinc.lua To try it with CURL please run the following command:...
Mail.ru: HTML Injection at "city-mobil.ru"
HTML Injection in city-mobil.ru on driver recruitment page...
Mail.ru: SECRET_KEY Of Django Leaked In maps.me
Token for a internal Jenkins account of maps.me was leaked via git commit...