CVE-2019-25073: Improper Limitation of a Pathname to a Restricted Directory

Improper path sanitization in github.com/goadesign/goa before v3.0.9, v2.0.10, or v1.4.3 allow remote attackers to read files outside of the intended directory...

goa-on.org Cross Site Scripting vulnerability OBB-2178213

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GO-2020-0032 Path traversal in github.com/goadesign/goa

Due to improper sanitization of user input, Controller.FileHandler allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read...

WS-2021-0194

Goa in versions v1.0.0 to v1.4.2 is allowing for directory traversal, an attacker to read files outside of the target directory that the server has permission to read. related to service.go...

PT-2021-9104 · Goa · Goa

Name of the Vulnerable Software and Affected Versions: github.com/goadesign/goa versions prior to 3.0.9 github.com/goadesign/goa versions prior to 2.0.10 github.com/goadesign/goa versions prior to 1.4.3 Description: The issue is related to improper path sanitization, allowing remote attackers to...

goaexperience.co.uk Cross Site Scripting vulnerability OBB-1260926

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Almost Half A Million Delhi Citizens' Personal Data Exposed Online

Exclusive — A security researcher has identified an unsecured server that was leaking detailed personal details of nearly half a million Indian citizens... thanks to another MongoDB database instance that company left unprotected on the Internet accessible to anyone without password. In a report...

goaholidayhomes.com XSS vulnerability

Open Bug Bounty ID: OBB-719259 Description| Value ---|--- Affected Website:| goaholidayhomes.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Nullcon GOA 2012 - International Security Conference

Nullcon GOA 2012 - International Security Conference The open security community is a registered non-profit society and by far the largest security community in India with more than 2000 members comprising of information security professionals, ethical hackers and law enforcement professionals...

Nullcon GOA 2012 - International Security Conference

Nullcon GOA 2012 - International Security Conference The open security community is a registered non-profit society and by far the largest security community in India with more than 2000 members comprising of information security professionals, ethical hackers and law enforcement professionals...

Nullcon 2011 - Information security Event !

Nullcon the open security community is back with the second edition of nullcon Goa, an international security conference. The event provides cutting edge research in information security in a vendor neutral environment Event details Event: nullcon 2011 Date: 25 February-26 February 2011 Location:...