Malicious code in caravan-grove-emc436-project (npm)

The package caravan-grove-emc436-project was found to contain malicious code...

Malicious code in dragon-grove-qxk798-project (npm)

The package dragon-grove-qxk798-project was found to contain malicious code...

Malicious code in dragon-grove-xpg303-project (npm)

The package dragon-grove-xpg303-project was found to contain malicious code...

MAL-2025-21961 Malicious code in grove-hill-anq301-project (npm)

The package grove-hill-anq301-project was found to contain malicious code...

MAL-2025-27533 Malicious code in nimbus-grove-iwn738-project (npm)

The package nimbus-grove-iwn738-project was found to contain malicious code...

walnutgrove.org Cross Site Scripting vulnerability OBB-2706423

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

High school student rickrolls entire school district, and gets praised

A student at a high school in Cook County successfully hacked into the Internet-of-Things IoT devices of one of the largest school districts in Illinois, and gave everyone a surprise. Minh aka @WhiteHoodHacker on Twitter who attends Elk Grove—a name that curiously resembles the home town of...

new.risingphoenixgrove.org Cross Site Scripting vulnerability OBB-1466260

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

grovefineart.co.uk Cross Site Scripting vulnerability OBB-1313530

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

grovefineart.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-651652 Description| Value ---|--- Affected Website:| grovefineart.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2014-6962

The Elk Grove PublicStuff aka com.wassabi.elkgrove application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Elk Grove PublicStuff aka com.wassabi.elkgrove application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6962

The Elk Grove PublicStuff aka com.wassabi.elkgrove application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6962

The CVE-2014-6962 entry corresponds to the Elk Grove PublicStuff Android app (package com.wassabi.elkgrove) version 3.2, which does not verify X.509 certificates from SSL servers. This creates a vulnerability where man-in-the-middle attackers could spoof servers and access sensitive information v...

CVE-2014-6962: Undefined Security Weakness

The Elk Grove PublicStuff aka com.wassabi.elkgrove application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7638

Name of the Vulnerable Software and Affected Versions Elk Grove PublicStuff aka com.wassabi.elkgrove version 3.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...