CVE-2020-7993: Missing Authorization

Prototype 1.6.0.1 allows remote authenticated users to forge ticket creation on behalf of other user accounts via a modified email ID field...

PT-2020-19904

Name of the Vulnerable Software and Affected Versions Prototype version 1.6.0.1 Description The issue allows remote authenticated users to forge ticket creation on behalf of other user accounts by modifying the email ID field. Recommendations For Prototype version 1.6.0.1, consider restricting...

Discourse < 2.4.0.beta3 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities including CSRF flaws. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Information disclosure

IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API. Any registered user can obtain a list of all other users in all other orgs, including email id/names, etc. IBM X-Force ID: 155148...

CVE-2018-2009

IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API. Any registered user can obtain a list of all other users in all other orgs, including email id/names, etc. IBM X-Force ID: 155148...

Semrush: Improper authentication on registration

Hope you are doing well, one can register himself to semrush with any email ID. It means that there is no authentication mechanism if that email id is valid/invalid. Therefore a person with email ID that does not exist can also register and login to your platform. Summary: one can register himsel...

Legal Robot: Issues with Forgot password Error Handling

Hello @team, I found a similar issue to 249695.Where user when giving an error email id it is not showing any error response.This is not of high impact but this might throw the users in confusing state as there is no error message user will be waiting for the server response. Steps to reproduce:...

Password reset Vulnerability in Facebook Employees Secure Files Transfer service

Many be many of you are not aware about this, but Facebook having a Secure Files Transfer service for their Employees at https://files.fb.com and Hacker reported a very critical password reset vulnerability. Nir Goldshlager, a researcher told 'The Hacker News' that how he defeat Facebook's Secure...

Pakistani Music site Database and Vulnerability Exposed by Maxt Breaker

Pakistani Music site Database and Vulnerability Exposed by Maxt Breaker A hacker with name "Maxt Breaker" hack one of the Pakistani Music website and expose its Database and Vulnerability via posting on public sites. Vulnerable Link is also shown in Image and some sample of database is also...

ISI Chief - Ahmed Shuja Pasha Email ID hacked by Indian Hacker

ISI Chief - Ahmed Shuja Pasha Email ID hacked by Indian Hacker An Indian Hacker "creatrix" Claim to hack into the email id of ISI Chief Ahmed Shuja Pasha's .The Directorate for Inter-Services Intelligence more commonly known as Inter-Services Intelligence or simply by its initials ISI, is...

Roger Ebert Email ID got hacked by Rapt0r - Anonymous Operation #AntiSec

Roger Ebert Email ID got hacked by Rapt0r - Anonymous Operation AntiSec Roger Joseph Ebert's Email ID [email protected] hacked by Rapt0r for Anonymous Operation AntiSec. Roger Joseph Ebert is an American film critic and screenwriter. He is the first film critic to win a Pulitzer Prize for...

Manchu Manoj Email ID Hacked !

Collection king Mohanbabu's son Manchu Manoj's email id was hacked last week. The star who came back from USA recently after treatment for his arm injury was in for a shock when his email id was hacked. Sources say the hacker even chat with Manoj's friends online. Manoj rectified the problem but...

Joint Director's (Technical Education Department) official mail ID hacked

The Joint Director of Technical Education Department in Palace Grounds has fallen prey to hacking and email fraud. His official email ID was hacked and a number of messages were sent to a number of government employees seeking help. Joint Director R Krishnamurthy said his official email ID create...