20626 matches found
apps.franklincountyohio.gov Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-991096 Security Researcher devl00p Helped patch 3013 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting apps.franklincountyohio.g...
GitLab: Blind SSRF in FogBugz project import
Vulnerability description not provided...
Mail.ru: donationalerts.com limitations bypass
Domain limitation for CORS in api-awards.donationalerts.com were incorrectly checked, it allowed crossdomain API requests...
Automattic: Rate Limit Misconfiguration on tumblr login .
Summary: The Rate Limit should always be on the login endpoint and have an acceptable limit, for example, 20 rate limit, but when there is no limit or the limit is huge, for example, 5000, this is certainly dangerous because it is a Rate Limit Misconfiguration, for example . -------------- PoC :...
Liberapay: Private target account appears in search results
Summary At policy page, there are special tailor account, highly confidential & secret ! F600997 - Hide this profile from search results on Liberapay - Prevent this profile from being listed on Liberapay - Target account hackerone-target-team Description In this exploit, I found Privacy setting...
HackerOne: Team object in GraphQL disclosed of private programs via the industry
Summary: Disclosure of private programs across the industry If the program is private, it will show industriy Steps To Reproduce "query": "query teamhandle:\"█████████\"id,industry" "data":"team":"id":"█████████","industry":"Computer Hardware \u0026 Peripherals" "query": "query...
Mail.ru: Account Takeover at vseapteki.ru
Insufficient protection against SMS code bruteforcing allowed account takeover in vseapteki.ru Common flaws of SMS auth: https://blog.deteact.com/common-flaws-of-sms-auth/...
LY Corporation: Get-based SSRF limited to HTTP protocol on https://resizer.line-apps.com/form
A SSRF in the resizer's /form endpoint allowed for leaking HTTP protocol based information from our internal network. The vulnerability could be used to scan ports and get service banners like SSH versions etc, but it was also possible to leak images available on the internal network. If an...
Razer: [pay.gold.razer.com] Stored XSS - Order payment
The tester discovered that the pay.gold.razer.com site suffered from a Stored XSS issue that could be used to steal a client id and key. The tester worked with team to provide multiple POCs to help them resolve the issue. Razer appreciates all the assistance from corraldev, which was above and...
IBM: SQL Injection and plaintext passwords via User Search
An identified SQL Injection vulnerability was reported to IBM found within an IBM asset. It has been analyzed, and resolved. We thank the xyantix for reporting this vulnerability...
Bumble: SSO through odnoklassniki uses http rather than https
SUMMARY When using single-sign on through odnoklassniki, the user is sent to an http non-https URL, allowing an attacker under some conditions to log in to the victim's Badoo account by stealing odnoklassniki credentials, as well as to execute a CSRF-attack on the log-in form. RECOMMENDATION Let...
Starbucks: India - An Insecure Direct Object Reference (IDOR) allowed unauthorized access to view card index number and monetary balance
mrintrusionist discovered an Insecure Direct Object Reference IDOR which affects the https://card.starbucks.in/StarbucksMSRModule/starbucksGetCardData.do endpoint through the cardId parameter. This allowed an authenticated, but unauthorized user to iterate cards and view the balance...
Mail.ru: worki.ru: SMS code bruteforce
SMS code verification process in worki.ru was not sufficiently protected against bruteforce attack Common flaws of SMS auth: https://blog.deteact.com/common-flaws-of-sms-auth/...
more-news.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-977299 Security Researcher g0bl1nsec Helped patch 3766 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting more-news.ru website and i...
Equifax-vdp: Information Leak (Github)
In Github I found some credentials to use in a webservice that exposes very sensitive information of people, family group, financial situation, and more. Github: https://github.com/geraldincg/proyecto/blob/9c89787deb1d217f58b58786d90bfb3eab290237/Proyecto/ViewModels/WebService/ConexionWS.cs The...
U.S. Dept Of Defense: PII leakage due to scrceenshot of health records
Summary: Document shows a screenshot of a medical record for a soldier Description: One of the slides describes the CIV and PAD DSN along with some information relating to the soldier such as their name, the information appears to be old but could be still be an issue if they're in service Impact...
8x8: Access to ██████████████ due to weak credentials
Hi Team Description: During the analysis, It was found that the █████████████████████ ask's for credentials from the users to access the ██████, But the weak credentials set █████:██████ allows anyone to login. Steps To Reproduce: 1. Open █████████████████████████ 1. Enter █████████ ███████...
QIWI: Обход комиссии на переводы
Обход комиссии на переводы...