20626 matches found
thailandmotorbike.tarad.com Cross Site Scripting vulnerability OBB-1193373
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Blueboard: path traversal vulnerability adding /████████ after ████████ and skip ██████ page.
This report has brought to light a workaround to scheduling calls with our sales team, that would allow anyone to do so without going through our dedicated marketing website's flow...
h1-ctf: [h1-2006 2020] Bounty payments are done !
Read more here! https://github.com/Louzogh/CTF-Writeup/blob/master/2020/H1-2006-CTF/README.md Hey, I've published my write-up at : https://github.com/Louzogh/CTF-Writeup/blob/master/2020/H1-2006-CTF/README.md Enjoy 😅...
h1-ctf: [h1-2006 2020] Writeup h12006 CTF
^FLAG^736c635d8842751b8aafa556154eb9f3$FLAG$ Impact...
Mail.ru: Grafana SSRF in grafana.instamart.ru
non-blind SSRF in grafana.instamart.ru...
BlockDev Sp. Z o.o: Email HTML injection
Email HTML injection...
h1-ctf: [H1-2006 2020] CTF write-up
Summary: Hello HackerOne team! I finally managed to solve this long but really nice CTF! Here is the flag: ^FLAG^736c635d8842751b8aafa556154eb9f3$FLAG$. You can access my writeup at https://diego95root.github.io/posts/H1-2006-CTF/. It's password protected, the password is the flag. Thank you so...
Node.js third-party modules: Arbitrary code execution via untrusted schemas in is-my-json-valid
I would like to report an arbitrary code execution vulnerability in is-my-json-valid. It allows to execute arbitrary code if an attacker-controlled schema is passed to is-my-json-valid. The module Readme doesn't say anything about the risks of untrusted schemas, so I by default assume that this i...
h1-ctf: [H1-2006 2020] Includes 1 free content discovery
Summary Got it! Thanks guys for going through the trouble to make these. Best regards @nahamsec @adamtlangley @B3nac for hosting and @hackingfish @zonkism and @clos for peer support to make it. Writeup to follow, but let's have the flag first! F859962 Impact Participating in CTFs can cause...
Zivver: Cross-Site Scripting thorough XSSJacking/PasteJacking Technique
The documentation website you found is a static website and the only way to inject the payload is by pasting it in the search box. There is no way to compose a url that you can send to someone else that would then also trigger the attack. Even with a successful attack, there is no user data on th...
U.S. Dept Of Defense: Subdomain takeover of ███
Summary: The subdomain ██████ had an CNAME record pointing to an unclaimed ███████ webservice. This is a high severity security issue because an attacker can register the subdomain on ███ and therefore can own the subdomain █████████. Description: The dangling CNAME record of █████████ is pointin...
Mail.ru: ICQ Android APP remote DoS
Memory corruption issue on GIF image processing leads to ICQ for Android application crash with potential for code execution. before testing and reporting DoS conditions please check @mailru rules and scope description to avoid signal/reputation loss, not every DoS report is accepted...
Open-Xchange: Null pointer deference in call to `mail_get_flags`
run test suite on following input require "vnd.dovecot.testsuite"; require "fileinto"; require "imap4flags"; require "mailbox"; testset "message" text: Subject: Test message. Test message. . ; test "Flag changes between stores" fileinto :create "FolderA"; if not testresultexecute testfail "failed...
Open-Xchange: Panic in file smtp-address.c: line 684 (smtp_address_write): assertion failed: (smtp_char_is_qpair(*p))
Reproducer is running test suite against file crash2.txt and getting following output : ./src/testsuite/testsuite crash2.txt Test case: crash2.txt: testsuitecatena: Panic: file smtp-address.c: line 684 smtpaddresswrite: assertion failed: smtpcharisqpairp Abort trap: 6 Content or crash2.txt is...
QIWI: PIN OK attack
PIN OK attack is an attack when a wedge-device created for MiTM is used to substitute the response from the card during an offline-PIN check and say that PIN was correct. Reproduction steps: An attacker with a stolen card without the correct PIN knowledge can use either a so-called wedge device f...
h1-ctf: [H1-2006 2020] CTF write-up
Hello, thank you for the awesome CTF! I definetly learned a lot. For now I will submit just the Flag. I am going to follow up with the Writeup as soon as possible. ^FLAG^736c635d8842751b8aafa556154eb9f3$FLAG$ Kind regards, Alex - hackingfish Attached: A screenshot of the site which is showing the...
Mail.ru: lenta_proxy information disclosure
Sensitive application configuration data disclose on lenta.proxy.instamart.ru...
Lark Technologies: Sub-Dept User Can Add User's To Main Department.
A vulnerability was found where users with permissions to manage the user section can add others outside of their department by changing the value of "departmentid" to an empty value. We thank @imrannisar for reporting this to our team...
pis.sk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1181154 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Internet Bug Bounty: [CVE-2020-10543] Buffer overflow caused by a crafted regular expression
CVE ID: CVE-2020-10543 See: + https://metacpan.org/pod/release/XSAWYERX/perl-5.30.3/pod/perldelta.pod + https://metacpan.org/pod/release/XSAWYERX/perl-5.28.3/pod/perldelta.pod Impact Potential RCE...