58 matches found
CVE-2022-0461
CVE-2022-0461 describes a policy bypass in COOP that allows a remote attacker to bypass the iframe sandbox in Google Chrome. The vulnerability affects Chrome versions prior to 98.0.4758.80, where a crafted HTML page can exploit COOP sandbox policies. The issue is confirmed in multiple connected s...
Denial Of Service (DoS)
chrome is vulnerable to denial of service. The vulnerability exists due to an unknown function of the component COOP...
Chromium: CVE-2022-0461 Policy bypass in COOP
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
eastendfood.coop Improper Access Control vulnerability OBB-2194603
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
coop-cite.org Improper Access Control vulnerability OBB-2173516
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Crystal Valley Farm Coop Hit with Ransomware
Crystal Valley, a Minnesota-based farm supply and grain marketing cooperative, has become the second U.S. agriculture business to be hit with a ransomware attack this week. The company released a statement about the attack on its website on Tuesday afternoon, but as of Wednesday afternoon, the si...
Kaseya Attack Fallout: CISA, FBI Offer Guidance
The REvil cybergang is taking credit for Friday’s massive ransomware attack against managed service provider Kaseya Ltd. The criminals behind the attack claim it infected 1 million systems tied to Kaseya services and are demanding $70 million in bitcoin in exchange for a decryption key. Federal...
coop-ra.com Cross Site Scripting vulnerability OBB-1475946
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
bookit.modo.coop Cross Site Scripting vulnerability OBB-1319549
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
coop-ecologie.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1139679 Security Researcher geeknik Helped patch 8949 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting coop-ecologie.com website...
danvillecoop.com XSS vulnerability
Open Bug Bounty ID: OBB-707297 Description| Value ---|--- Affected Website:| danvillecoop.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
coop-game.com XSS vulnerability
Open Bug Bounty ID: OBB-661607 Description| Value ---|--- Affected Website:| coop-game.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
coop.ch XSS vulnerability
Open Bug Bounty ID: OBB-573893 Description| Value ---|--- Affected Website:| coop.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
coop.com.au XSS vulnerability
Open Bug Bounty ID: OBB-451642 Description| Value ---|--- Affected Website:| coop.com.au Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
MS16-145: Edge browser the TypedArray. sort UAF vulnerability analysis-vulnerability warning-the black bar safety net
In this article, we will provide the reader detailed analysis of how to use the MS Edge browser in the UAF vulnerability to remote code execution. This article will provide readers in-depth analysis of the impact of MS Edge CVE-2016-7288 UAF vulnerability root causes, and how to reliably trigger...
New COOP Attack Method Highlights Weaknesses In Microsoft's CFG Defenses
Researchers at Endgame have been evaluating an exploitation technique called Counterfeit Object-Oriented Programming COOP to bypass Control Flow Integrity CFI implementations such as that used by Microsoft to harden the defenses of Windows 10. Microsoft added its mitigation, called Control Flow...
VirtualBox - Cooperating VMs can Escape from Shared Folder Exploit
Exploit for linux platform in category local exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1037 There is a security issue in the shared folder implementation that permits cooperating guests with write access to the same shared folder to gain access to the whole...
coop-tic.eu XSS vulnerability
Vulnerable URL: http://coop-tic.eu/wakka.php?wiki=RedTurk Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7090536 VIP website status:| No Check coop-tic.eu SSL connection:| Grade: F...