20626 matches found
Rockstar Games: image injection /screenshot-viewer/responsive/image (ANOTHER FIX BYPASS)
In this report, the researcher was able to identify an oversight in our input filtering put in place to fix previous findings in the screenshot-viewer utility on the main website. Thanks to this report, we were able to improve our solution to prevent bypasses such as this one...
VK.com: Просмотр аттачей удаленного сообщения.....
Просмотр аттачей удаленного сообщения из своих переписок...
Omise: Open Redirect
Open Redirect Vulnerability URL : https://www.omise.co////bing.com/?www.omise.co/?category=interview&page=2 Parameter Type : URL Rewrite Attack Pattern : %2f%2f%2fr87.com%2f%3fwww.omise.co%2f How to Reproduce 1. Intercept the below url using Burpsuite & send it to repeater...
PuTTY (European Commission - DIGIT): Assertion `col >= 0 && col < line->cols' failed, process aborted while streaming ouput from remote server
Summary: During the course of testing putty-0.70-2019-03-01.e0a7697 on Fedora 29 compiled with clang version 7.0.1 Fedora 7.0.1-4.fc29, we discovered it was possible to abort a remote client by streaming data at it in such a way as to trigger an assertion failure in terminal.c. putty:...
Mail.ru: [XSS] postMessage в jsapi/button
XSS via postMessage handler in o2.mail.ru...
Slack: Real Time Error Logs Through Debug Information
Summary: During the assessment, I have found the debug URL on slackb.com which is disclosing the World Wide real time error logs of Slack users. The information leaked includes the following: 1. User Device Information 2. Redacted Token 3. Client IP Address 4. Description 5. Session ID 6. Team ID...
Mail.ru: Reflected XSS in https://light.mail.ru/login via page
Reflected XSS via GET parameter in light.mail.ru...
ecobee: CSTI on https://www.ecobee.com leads to XSS
Summary: Hi EcoBee team, the https://www.ecobee.com domain is vulnerable against angular injection via CSTI, that leads to XSS. Steps To Reproduce: 1. Go on https://www.ecobee.com/?s=x%20=%20%27y%27:%27%27.constructor.prototype;%20x%27y%27.charAt=.join;$eval%27x=alert/Mik/%27; 1. XSS executed...
Starbucks: SSRF at ideas.starbucks.com
In this report, @damian89 identified a Server Side Request Forgery SSRF vulnerability on ideas.starbucks.com that allowed sending arbitrary HTTP requests and returned response bodies. The report went on to demonstrate how this flaw could be leveraged to use the vulnerable host as a proxy and...
Liberapay: Session Cookie without HttpOnly and secure flag set
This report was closed as informative because we decided that for this to be a significant concern, the reporter would have to chain this issue with something else such as cross-site scripting...
Nextcloud: XSS On Nextcloud Integrated with zimbra drive
Hello Team, There is an stored xss on Nextcloud plugin with Zimbra Drive. I integrate zimbra with nextcloud 13 zimbra drive 0.8.20. Please see attached file and I am waiting for your response. Best regards Impact Get sensitive data...
Mail.ru: Раскрытие информации о совершенных операциях
History API in pandao.ru could disclosure non-personalized data about last operations...
Mail.ru: Cross site scripting vulnerability in JW Player SWF
Flash-based XSS in aw-xbox.my.com...
Mail.ru: XSS
Reflected XSS in vseapteki.ru via URI path...
Mail.ru: XSS via the lang parameter in a POST request on light.mail.ru
Reflected XSS in light.mail.ru via request parameters...
Notepad++: Crash
1 Settings - Preferences - Print 2 insert to "Left part" field of "Header" block A500 Full string for paste consist in poc.txt 3 Click "Add" 4 Crash Crash info: 1c8.2dd8: Unknown exception - code c000041d !!! second chance !!! ERROR: Module load completed but symbols could not be loaded for npp.e...
Ian Dunn: XSSI: Quick Navigation Interface - leak of private page/post titles
CVSS ---- Medium 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Description ----------- The Quick Navigation Interface plugin includes the names of all posts and pages in an automatically generated JavaScript file. By including this file in their own page, an attacker can view all post titles -...
PuTTY (European Commission - DIGIT): Assertion `len == 1' failed, process aborted while streaming ouput from remote server
Summary: During the course of testing putty-0.70-2019-02-12.75dda5e on Fedora 29 compiled with clang version 7.0.1 Fedora 7.0.1-1.fc29, we discovered it was possible to abort a remote client by streaming data at it in such a way as to trigger an assertion failure. putty: unix/gtkwin.c:3801: void...
Mail.ru: Доступ к аккаунту после смены пароля.
Session was not expired on password change in pandao.ru...
Automattic: No Rate Limit on CrowdSignal Polls when Adding Comment
Hi team! I hope this isn't duplicate :/ I created a poll on CrowdSignal.com https://poll.fm/10226924 When adding a comment, there is no rate limit. You can see my comments on my poll. 1. Go to any poll. 2. Turn on Intercept and Add a Comment. 3. Send request to Intruder. 4. Set your payloads and...