130 matches found
MAL-2025-21969 Malicious code in grove-quasar-keb769-project (npm)
The package grove-quasar-keb769-project was found to contain malicious code...
walnutgrove.org Cross Site Scripting vulnerability OBB-2706423
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
High school student rickrolls entire school district, and gets praised
A student at a high school in Cook County successfully hacked into the Internet-of-Things IoT devices of one of the largest school districts in Illinois, and gave everyone a surprise. Minh aka @WhiteHoodHacker on Twitter who attends Elk Grove—a name that curiously resembles the home town of...
new.risingphoenixgrove.org Cross Site Scripting vulnerability OBB-1466260
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
grovefineart.co.uk Cross Site Scripting vulnerability OBB-1313530
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
grovefineart.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-651652 Description| Value ---|--- Affected Website:| grovefineart.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2014-6962
The Elk Grove PublicStuff aka com.wassabi.elkgrove application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The Elk Grove PublicStuff aka com.wassabi.elkgrove application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6962
The Elk Grove PublicStuff aka com.wassabi.elkgrove application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6962
The CVE-2014-6962 entry corresponds to the Elk Grove PublicStuff Android app (package com.wassabi.elkgrove) version 3.2, which does not verify X.509 certificates from SSL servers. This creates a vulnerability where man-in-the-middle attackers could spoof servers and access sensitive information v...