20626 matches found
Mail.ru: IDOR of contracts on dictor.mail.ru
API endpoint at dictor.mail.ru disclosed e-mails of registered users...
megacampsinflatables.co.uk Cross Site Scripting vulnerability OBB-1224582
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Nextcloud: No rate limiting on sinup page
Hi Team, Summary: As a best practice a login page should have a rate limiting. Below is the captured request of respective login page of nextcloud.com -------------------------------------------------------------------------------------------------------------------- POST...
vitiscellars.co.nz Cross Site Scripting vulnerability OBB-1223919
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Radancy: [mijn.werkenbijdefensie.nl] Denial of service occurs due to lack of email length confirmation
Creating an account on https://mijn.werkenbijdefensie.nl/profielaanmaken/ could be done with a very long emailaddress. A max email address length validation check has been implemented as per RFC the maximum length allowed for an email address is 255 characters. However, we don't validate email...
Visma Public: Missing authorization allows sales only user to record payment.
The researcher has found a missing authorization issue that allowed a sales only user to record payments that he was not supposed to...
Mail.ru: Clickjacking Vulnerability via https://webagent.mail.ru leading to protection bypass for https://web.icq.com/ end point
Clickjacking protection bypass on web.icq.com via webagent.mail.ru...
nuuo.com Cross Site Scripting vulnerability OBB-1218329
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Kubernetes: Fake email from <any_name>@kubernetes.io to any other email
Hi, I just found an issue No Valid SPF Records in your mail server @kubernetes.io Desciprition : There is a email spoofing vulnerability.Email spoofing is the forgery of an email header so that the message appears to have originated from someone or somewhere other than the actual source. Email...
Mail.ru: [combo.mail.ru] SMS code bruteforce
Authentication procedure was not sufficiently protected against bruteforce and allowed arbitrary combo.mail.ru account takeover...
Mail.ru: xss while uploading a file
Self-XSS via uploaded file name in city-mobil.ru XSS executing while uploading payloaded file...
WordPress: CSRF on comment post
Hi Wordpress, I just found an CSRF on comment post. It allow attacker make victim comments on a post. Steps To Reproduce: Attacker send to victim a link with content below: history.pushState'', '', '/' Video poc: F891759 Impact Attacker make victim comments on a post...
latitude50.co.uk Open Redirect vulnerability OBB-1213847
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Shopify: increased privileges on staff account
staff on partners without a store management permit can have access to the collaboration shop steps for reproduction 1. Invite staff to partners without store management permission 2. accept the invitation and the staff has become a member of the partner 3. On the staff account, try to access the...
DuckDuckGo: XSS on Videos IA
Failure found in the videos tab. A user was created on a website https://rutube.ru/video/83a4775f020b3fd68efd3dc9a73031e8/ one with the tag " . When we search DuckDuckGo for the video or user tag, we find a xss flaw in page...
Mail.ru: Mail.ru for Android - Theft of sensitive data
Symlink vulnerability in sharing activity allowed to access internal application files in Mail.Ru Mail for Android...
Nextcloud: Github wikis are editable by anyone https://github.com/nextcloud/bookmarks/wiki
Github wikis on the following projects https://github.com/nextcloud/bookmarks/wiki can be edited by any logged in user in the system. This poses security and reputation risk for the company. Impact As wikis listed above can be edited by any person on the internet, a malicious actor can accurately...
Courier: Logout page does not prevent CSRF
Summary: Cross-Site Request Forgery CSRF is an attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated. ... If the victim is an administrative account, CSRF can compromise the entire web application. Steps To Reproduce: 1.Create a...
Mail.ru: Access admin interface via bad credentials
Staging testing version of plazius.ru manager's interface was available from external network with guessable default credentials. This interface had no access to production data...