20626 matches found
h1-ctf: [H1-2006 2020] CTF Writeup
F851692 ^FLAG^736c635d8842751b8aafa556154eb9f3$FLAG$ I'll try to have the writeup ready in the following days here: https://hipotermia.pw/bb/h1-2006-ctf-solution It will be password protected and I will post a comment here when it is ready. Thanks for this CTF, I really enjoyed it! Impact -...
Mail.ru: Private file read through file attachment
my.com MyMail application for Android could be tricked by malicious local application selected as a file picker by user to copy the file from application folder to insecure location...
Helium: Read-Only user can delete users
hello this endpoint DELETE /api/invitations/0ff7e9f9-877a-40cc-b99f-f6b3b1bea3f8 vulnerable to Insecure Direct Object Reference Steps to reproduce the bug Let's assume that three accounts exist: [email protected] role Administrator [email protected] role Read-Only [email protected] invited user...
Mail.ru: mail.ru/touch xss(r) debug parameter
Reflected XSS in touch version of mail.ru via GET parameter debug...
h1-ctf: [H1-2006 2020] CTF Writeup
Hi, The flag is :^FLAG^736c635d8842751b8aafa556154eb9f3$FLAG$ F850811 I will do the writeup in the report summary. Regards, Yash Impact None as the money paid was not real...
h1-ctf: [H1-2006 2020] CTF
As there is a bonus for first 10 solutions for now I'll just post a flag. F850100 Impact -...
Mail.ru: Local SQL Injection in Content Provider (ru.mail.data.contact.ContactsProvider) of Mail.ru for Android, version 12.2.0.29734
Local SQL injection vulnerability in ContactsProvider of Mail.ru Mail application for Android special permissions required...
h1-ctf: [H1-2006 2020] H1-CTF writeup
Summary: I've just solved the challenge, I will submit the write-up tomorrow. Impact Flag: ^FLAG^736c635d8842751b8aafa556154eb9f3$FLAG$...
h1-ctf: [H1-2006 2020] I successfully solved it!
Hello, I'll get post there the write-up soon. Here is flag: ^FLAG^736c635d8842751b8aafa556154eb9f3$FLAG$ Sincerely, @zeroxyele Impact null...
h1-ctf: [H1-2006 2020] I made the CEO's bounty payment!
^FLAG^736c635d8842751b8aafa556154eb9f3$FLAG$ I will write the details in comment. Impact I have headache now...
h1-ctf: [H1-2006 2020] CTF Writeup
Just submitting Flag for now, Will soon submit Writeup : Impact Flag: ^FLAG^736c635d8842751b8aafa556154eb9f3$FLAG$...
h1-ctf: [H1-2006 2020] H1-2006 CTF Writeup
Hi! The challenges were really great. I had a lot of fun and I can honestly say I learned a few tricks during this journey. I will be submitting the flag now and will work on a very good writeup until the deadline. My reasoning is that there are two different prizes, one for the first ten and...
biseibutu.co.jp Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1176233 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Lark Technologies: Stored xss in larksuite internal helpdesk and other user's helpdesk.
A stored XSS cross site scripting vulnerability was found which an attacker could have potentially used to obtain access to the internal team's help desk and view submitted user tickets. We have resolved this issue and thank @imrannisar for reporting this to our team...
news.storecreator.io Open Redirect vulnerability
Open Bug Bounty ID: OBB-1175400 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
d0.xcar.com.cn Open Redirect vulnerability
Open Bug Bounty ID: OBB-1175044 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
U.S. Dept Of Defense: Information Disclosure(PHPINFO/Credentials) on DoD Asset
Summary: A DoD leaks credentials on a phpinfo page. Description: https://███ publicly displays a phpinfo page that leaks system information and credentials. Impact The impact is medium not only due to information leakage of numerous different details such as system information but also the leakag...
in conradirwin/em-imap
Overview em-imap is a gem that allows you to connect to an IMAP4rev1 server in a non-blocking fashion. Affected versions of this package are vulnerable to Man-in-the-Middle MitM. The hostname in a TLS server certificate is not verified. An attacker can acquire the identity of a trusted server and...
Radancy: [www.werkenbijderet.nl] There is no rate limit for vacature-alert endpoints
https://werkenbijderet.nl/vacature-alert lacked a properly configured application specific tuned rate limiting defense mechanism. Because the speed limit was set very high, it was possible to send thousands of mails within 10 minutes. The fix was to implement a middleware which throttles requests...
Kubernetes: DoS for client-go jsonpath func
Summary: jsonpath recursive descent cause a DoS vul kubectl apiextensions-apiserver cli-runtime and kubernetes is depends on client-go I think evalRecursive cause of this vulnerability function pos: client-go/util/jsonpath/jsonpath.go:451 Component Version: client-go:master Steps To Reproduce: i...