20626 matches found
umpscare.com XSS vulnerability
Open Bug Bounty ID: OBB-651406 Description| Value ---|--- Affected Website:| umpscare.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Internet Bug Bounty: DoS for HTTP/2 connections by crafted requests (CVE-2018-1333)
modhttp2 can be tricked by specially crafted requests to hold server resources longer than necessary. A simple demonstration of this for a server with h2c enabled is as follows: for x in seq 0 500; do echo...
Internet Bug Bounty: linkinfo - openbasedir bypass on Windows PHP
Upstream bug - windows linkinfo lacks openbasedir check === https://bugs.php.net/bug.php?id=76459 Summary == Description: ------------ linkinfo function on windows doesn't implement openbasedir check, it can be seen by reviewing the source code. This could be abused to find files on paths outside...
unicaregroup.com XSS vulnerability
Open Bug Bounty ID: OBB-650675 Description| Value ---|--- Affected Website:| unicaregroup.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Starbucks: Subdomain takeover on svcgatewaydevus.starbucks.com and svcgatewayloadus.starbucks.com
Hello, This is fairly close to this report however these are different subdomains than the one in the report. This can be pretty serious since I can server virtually anything I want. In the 45 minutes I've held the domain I have served to 341 unique IP addresses. Two starbucks.com subdomains are...
luftbild-suche.de XSS vulnerability
Open Bug Bounty ID: OBB-649977 Description| Value ---|--- Affected Website:| luftbild-suche.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Nextcloud: HTML injection with AutoComplete suggestions
As user1 set your displayname to Name 2. As user2 autocomplete the name in the comments input or Talk chat input 3. Click on the user name you just autocompleted User2 is redirected to https://nextcloud.com Only works with HTML, not with script Impact User1 can trick user2 to render any html...
fidele-aujusse.de XSS vulnerability
Open Bug Bounty ID: OBB-649007 Description| Value ---|--- Affected Website:| fidele-aujusse.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
U.S. Dept Of Defense: Server-Side Request Forgery (SSRF)
Hi, I've found a Server-Side Request Forgery SSRF Steps to reproduce: + start listening on your server + navigate to http://██████/help/ACPS.htmhttp://$yourserver:$port + you will get the request ██████ Impact Server-Side Request Forgery SSRF Attack...
U.S. Dept Of Defense: ████████ SQL
hi , i think i find a SQL in https://██████████/ POST /requestaccount.php? HTTP/1.1 Host: █████ User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:60.0 Gecko/20100101 Firefox/60.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5...
Mail.ru: XSS на странице account.mail.ru/recovery
Reflected XSS via GET parameters in account.mail.ru...
Node.js third-party modules: Prototype pollution attack (merge.recursive)
I would like to report prototype pollution in merge. It allows an attacker to inject properties on Object.prototype. Module module name: merge version: 1.2.0 npm page: https://www.npmjs.com/package/merge Module Description Merge multiple objects into one, optionally creating a new cloned object...
Starbucks: Open Redirection in Login - Korean Starbucks
Summary: Open Redirection is performed in Korean Starbucks login page. An attacker can redirect victim to other site such as fishing. Description: When victim visit https://www.istarbucks.co.kr/login/login.do?redirecturl=//www.bughunting.net this site, and login, he/she is redirected to...
Node.js third-party modules: Prototype pollution attack (defaults-deep / constructor.prototype)
I would like to report a prototype pollution vulnerability in defaults-deep. It allows an attacker to inject properties on Object.prototype. Module module name: defaults-deep version: 0.2.4 npm page: https://www.npmjs.com/package/defaults-deep Module Description Like extend but recursively copies...
zanders.asureforce.net XSS vulnerability
Open Bug Bounty ID: OBB-644077 Description| Value ---|--- Affected Website:| zanders.asureforce.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
reflections.ubisoft.com XSS vulnerability
Open Bug Bounty ID: OBB-643711 Description| Value ---|--- Affected Website:| reflections.ubisoft.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
elasticemail.com XSS vulnerability
Open Bug Bounty ID: OBB-643102 Description| Value ---|--- Affected Website:| elasticemail.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
bayern.aok.de XSS vulnerability
Open Bug Bounty ID: OBB-642169 Description| Value ---|--- Affected Website:| bayern.aok.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Brave Software: `alert()` dialogs on `chrome-extension://` origin (internal pages)
Summary: Navigation to chrome-extension from the web is possible with 378805 ftp:// - chrome-extension://. A blank page is created during navigation to chrome-extension:// origin. Blank pages have "This page" title. It's possible to initiate alert with a social-engineering content and "This page"...