Gratipay: Harden resend throttling

Over in 87531, we're about to roll out a protection against using our "resend email verification" feature to mail-bomb a third party. However, [email protected] and [email protected] are not unlikely to fold down to the same address. In order to close that loophole, I suppose we'd need to...

Email Reconnaissance Tool: SimplyEmail

This tool was based off the work of theHarvester and kind of a port of the functionality. This was just an expansion of what was used to build theHarvester and will incorporate his work but allow users to easily build Modules for the Framework. Current Platforms Supported: Kali Linux 2.0 A few...

Deriv.com: Email Verification Link can be Used as Password Reset Link!

Hello again! basically,I have found a new issue which allows attacker to use a Email Verification Link and make it into a password reset link! Proof Of Concept: When you Send a Email Verification Link It looks like this...

ownCloud: No email verification during registration

When you register for a new account, there is no verification link sent to the email for confirmation. The account is directly activated and can be used without confirming the email. This is vulnerable as anyone can use anyone's email without verification. and one with valid email owner cant sign...

MapLogin: Bypass verification of email while creating account(No rate limiting enable for verification code)

Hi Team, Bug type : Authentication bypassMissing rate limiting Description : While creating a account user needs to enter a email id and verification has been sent to his email ID.It is a 4 digits code.But there is no rate limiting enable while checking the verification on server side.So basicall...

Burning Board < 2.3.1 - SQL Injection

Burning Board SQL Injection Vendor: Woltlab GmbH Product: Burning Board Version: = 2.3.1 Website: http://www.woltlab.de/ BID: 13643 CVE: CVE-2005-1642 OSVDB: 16575 SECUNIA: 15395 PACKETSTORM: 39262 Description: Burning Board is a popular, multi purpose forum / community software offered by WoltLa...

IRCCloud: Email verification links still valid after changing it 2x

When creating a new account on IRCCloud.com the user is asked to confirm his email address. The email verification link is formatted in the following way: ircloud.com/verify-emai/userid/emailaddress/hashvalue. If the user decides to change his email address before he confirmed it, a new...

Dropbox: Create N Accounts In Dropbox Irrespective Of Domain

I've found a flaw which does not verify your email, when you sign up for a new account, irrespective of domain name we can create multiple accounts. So we can use fake emails to get as many dropbox accounts. PFA video and get back to me if there is anything else...

Vimeo: Bypassing Email verification

Hi Description : While registering new account on vimeo the email must be verified - A confirmation link sent to the email the user want to register Without verifying user cant do some actions .There is a Bypass for it Steps For Doing PoC : 1.If attacker have already account with verified email I...

Vimeo: Full account takeover via Add a New Email to account without email verified and without password confirmation.

Description : This is especially important if the application is commonly used in shared computers such as cyber cafes or airport terminals Bug : Add a New Email to account without email verified and without password confirmation when the leaves open email ,Leading to the theft of account In less...

itBit Exchange: weird bug ! ( missing validation on new email verfication )

hey guys ! i have found an bug where your were not validating email verification codes properly ! steps to reproduce 1 lets assume you have [email protected] as email id 2 now change your email id to [email protected] via https://beta.itbit.com/profile 3 note down the codes of old email & new email lets assume old=1...

Vimeo: profile photo update bypass

hello sir this is N B Sri Harsha again as per vimeo rules , we are not allow to upload photo until we verify our email id i have bypassed it ! steps to reproduce you need to make three requests 1 POST /upload/getimageurl HTTP/1.1 Host: vimeo.com User-Agent: Mozilla/5.0 Windows NT 6.1; WOW64;...

phpyun csrf修改用户密码

简要描述： phpyun csrf修改用户密码 详细说明： 更新用户信息的请求没有防御csrf。可以修改用户的邮箱。而重置密码功能是选择用户信息中的邮箱发送找回验证码。结合利用。 修改用户信息的请求为:...

HackerOne: No email verification on username change

Hello Hackerone People This is an issue that i discovered in the username change option. Basically anyone can ask your system to change anyone's username on hackerone. I tested this by mailing at [email protected] to change the username of my friend's account from yhunterz to yahoohuntz whose...

vBulletin 4.x Verify Email Before Registration Plugin - SQL Injection

Title: vBulletin Verify Email Before Registration Plugin - SQL Injection Date: September 19 2014 Version: Any vBulletin 4.. version which has the plugin installed. Plugin: http://www.vbulletin.org/forum/showthread.php?t=294164 Author: Dave FW/FG The vulnerability resides in the registerformcomple...

HackerOne: Category- Broken Authentication and Session Management (leads to account compromise if some conditions are met)

Hi, Hope you are good! Steps to repro: 1 Create a HackerOne account having email address "[email protected]". 2 Now Logout and ask for password reset link. Don't use the password reset link. 3 Login using the same password back and update your email address to "[email protected]" and verify the same. 4 Now logout an...

A method can ignore the CDN to find the true IP DDOS and intrusion-vulnerability warning-the black bar safety net

This vulnerability,==should not count the vulnerability. But the impact of range is great, the current acceleration music, website defender, Baidu cloud acceleration, security, treasure, etc the CDN can beat the exhilaration of, a variety of high - DDOSand CC Defense, but this hole can ignore the...

HackerOne: Password Reset Bug

Possible account takeover using the forgot password link even after the email address and password changed. Steps to Reproduce =================================== Create an account in hackerone E.g [email protected] After account verification logout from the account Reset the password for...

金蝶云之家博客任意用户密码重置

简要描述： 详细说明： 地址： http://kdweibo.com/home 依次点击： 登陆--忘记登陆密码 然后登陆邮箱查看重置链接是否存在缺陷 上图中可看到，请求链接存在u和t的参数： 尝试数次后可观察到，u是固定不变的，大概是userName相关的串，而t是有规律的递增。 紧接着尝试重置密码的操作，发现u这个参数是无用的，post请求只发送一个t参数和表单中的新密码，如下图： 好了，现在我们开始研究这个t参数。在找回密码的第一个页面，连续数次提交我的邮箱地址，获取到5个重置密码的链接，把他们列在下面观察一下： 可以看出，t参数只有5-8位...

Cisco WebEx Training Center Email验证绕过音频会议加入漏洞

Bugtraq ID:64281 CVE ID:CVE-2013-6965 Cisco WebEx Training Center是一款互动式培训解决方案，可开展电子教学。 Cisco WebEx Training Center培训中心注册页面存在安全漏洞，允许未验证远程攻击者无需要提供合法Email地址加入培训会议的音频会议。漏洞是由于注册结束之前泄漏了培训会话信息URL，攻击者可收集泄漏URL中的培训会话访问代码和密码，使用这些信息加入受限会议。 0 Cisco WebEx Training Center 厂商补丁： Cisco ----- 用户可参考如下厂商提供的安全公告获得补丁信...