translate.linksistem.com XSS vulnerability

Open Bug Bounty ID: OBB-609051 Description| Value ---|--- Affected Website:| translate.linksistem.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

misgeret.co.il XSS vulnerability

Open Bug Bounty ID: OBB-608676 Description| Value ---|--- Affected Website:| misgeret.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

binariub.com XSS vulnerability

Open Bug Bounty ID: OBB-608334 Description| Value ---|--- Affected Website:| binariub.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Open-Xchange: Referer in /servlet/TestServlet

Hi. No encode referer URL in https://sandbox.open-xchange.com/servlet/TestServlet You check , but i think you need just replace Steps 1. Upload file 2. Change mimetype to "file":"filemimetype":"text/x-javascript" 3. Share to All or Link, but then need insert Iframe, same as in 342585 4. Make URL...

Mail.ru: api.icq.com / отсутсвие лимита на отправку сообщений удаляя параметр защиты "&r"

Researcher reported removing r= parameter from request allows to bypass rate limits. This claim was not confirmed, r= paramter protects message from intermediate caching and prevents sending the same message twice in the case of network failure, it does not affect any ratelimits, no security...

Rockstar Games: Smuggle SocialClub's Facebook OAuth Code via Referer Leakage

In this report, the researcher provided a POC in which they were able to combine two issues to create a condition that potentially could have allowed an attacker to obtain OAuth tokens. One of the issues involved allowing external content to load in our Screenshot Viewer tool; we resolved this...

Open-Xchange: [XSS] Style/Event Filter Bypass v4.0

Hi. I update today to 7.8.4 Rev28. And found new way - no filter before Previous reports 314204 Without // comment you checking: 1. As Object Payload: Result: 2. Сomma && empty object Payload: Result: Fix - I think you need replace all ' = &x27 if style='a"a&x27a' and replace all " = &x22 if...

ExpressionEngine: Import File Converter - local File inclusion

@lawrenceamer discovered a local file inclusion vulnerability that logged in users with access to the control panel and permission to access developer utilities may be able to exploit. @lawrenceamer gave a detailed report with step-by-step instructions for replicating and screen captures of a the...

Mail.ru: invalid handling of redirect_uri at o2.mail.ru/jsapi/button

o2.mail.ru/jsapi/button gets embedded as login window in website that using o2 oauth. parameter redirecturi by default may have either value of white listed domain from particular app by clientId either it may lead to .mail.ru, then it contacts with parent window via postmessages. Other domains a...

Mail.ru: api.icq.com / возможность присоединиться к любому чату (даже закрытому).

Получаем ссылку с АПИ на подключение к чату в моём случае она вот такая https://api.icq.net/mchat/AddChat?aimsid=002.0516319051.0828645279:740645342&c=WebIM.jscbtmpc12813&[email protected]&members=740645342 видим параметр &[email protected] просто меняем цифровое значение и вс...

Node.js third-party modules: [entitlements] Command injection on the 'path' parameter

Hello again, another command injection, this time on the entitlements module. Module module name: entitlements version: 1.2.0 npm page: https://www.npmjs.com/package/entitlements Module Description check the entitlements of a .app bundle Module Stats 26 downloads in the last day 328 downloads in...

technosoftcorp.com XSS vulnerability

Open Bug Bounty ID: OBB-606635 Description| Value ---|--- Affected Website:| technosoftcorp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

goldteamhomehealth.org XSS vulnerability

Open Bug Bounty ID: OBB-606315 Description| Value ---|--- Affected Website:| goldteamhomehealth.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

VK.com: Просмотр любых записей на стене

Отсутствие необходимых проверок при создании рекламного объявления. Можно было смотреть записи любых частных и закрытых групп, удаленные записи в группах или профилях, записи на удаленных страницах, заблокированные группы, посты в предложке...

maplestreetguitars.com XSS vulnerability

Open Bug Bounty ID: OBB-606015 Description| Value ---|--- Affected Website:| maplestreetguitars.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pvanduijvenvoorde.nl XSS vulnerability

Open Bug Bounty ID: OBB-605430 Description| Value ---|--- Affected Website:| pvanduijvenvoorde.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

funeralinformation.com.tw XSS vulnerability

Open Bug Bounty ID: OBB-605018 Description| Value ---|--- Affected Website:| funeralinformation.com.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Node.js third-party modules: Command injection in 'pdf-image'

I would like to report command injection in pdf-image It allows executing commands on the server Module module name: pdf-image version: 1.0.5 npm page: https://www.npmjs.com/package/pdf-image Module Description Provides an interface to convert PDF's pages to png files in Node.js by using...

ExpressionEngine: [EE] Spoof the redirect process

The original report was not a security issue, but that did lead the reporter to discovering that a user could potentially be tricked by nesting redirects so that they first redirected to the site itself, which would allow the second redirect to occur without warning the user that they were being...

impressrecruitment.com XSS vulnerability

Open Bug Bounty ID: OBB-601883 Description| Value ---|--- Affected Website:| impressrecruitment.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...