Ed: Oauth flow on the comments widget login can lead to the access code leakage

Description Hello. Here is a keyword: frog I discovered an little Oauth flow in the comments widget authentication process using redirecturi manipulations. The widget located on the all blogposts, which have URL https://edoverflow.com/2017/post-title/ Upon authentication, it appeared that code...

OURPHP has information leakage vulnerability

OURPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. OURPHP has an administrator login password and security code leakage vulnerability, which can be exploited by attackers to obtain sensitive information...

X (Formerly Twitter): [staging-engineering.gnip.com] Publicly accessible GIT directory

Steps to reproduce: Open http://staging-engineering.gnip.com/.git/logs/refs/heads/master Publicly accessible GIT directory сan lead to leakage of source code and other private information...

Slack: Source code leakage through GIT web access at host '52.91.137.42'

@d0znpp alerted us to the public availability of Git files on a QA server. This lead to the access to files which should have been restricted. We have enforced proper access control, and Slack awarded @d0znpp a $1,500 bounty for bringing the issue to our attention! Thank you!...

NetShen E-commerce System Exists IIS Write Permission, Source Code Leakage Vulnerabilities

NetShen Information Technology Beijing Co., Ltd. is a high-tech information security solution, product and service provider integrating technology research and development, manufacturing and comprehensive service. NetShen's e-commerce system suffers from IIS write permission and source code leaka...

ibm-http 1.3.19 代码泄漏漏洞

No description provided by source...

WebSphere <=6.0 包含%20 请求导致代码泄露

No description provided by source...

WebLogic 6.0 存在代码泄露漏洞

No description provided by source...

MyBlog多个远程信息泄漏漏洞

BUGTRAQ ID: 30310 CNCAN ID：CNCAN-2008072204 MyBlog是一款基于PHP的博客程序。 MyBlog存在多个输入验证问题，远程攻击者可以利用漏洞获得敏感信息。...

Multiple Macromedia JRun bugs

DoS, source code leakage, session hijacking, crossite scripting, buffer overflow...

CVE-2003-0424

Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space %20 or . %2e characters to an HTTP request for the script, e.g. viewbroadcast.cgi...

jboss .jsp source code leakage

By adding 00 то URL it's possible to obtain source code of .jsp page...

Source code leakage in JRun

Adding some sequences to request it's possible to obtain JSP source code...

PHP Security Advisory - Apache Module bugs

Problems ========= 1 PHP supports a configuration mechanism that allows users to configure PHP directives on a per-directory basis. Under Apache, this is usually done using .htaccess files. Due to a bug in the Apache module version of PHP, remote 'malicious users' might be able to create a specia...