ISACA Moscow Vulnerability Management Meetup 2017

Last Thursday, I attended a very interesting event entirely dedicated to Vulnerability Management - open ISACA Moscow meetup. Me and my former colleague from Mail.Ru Group Dmitry Chernobaj presented there our joint report "Enterprise Vulnerability Management: fancy marketing brochures and the...

Meetup - Exported components, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Meetup published at the 'play' market has multiple vulnerabilities...

Instacart: Login with Google Not Authenticated on iOS App

In your iOS application, there is Login with Google. In this, you're not authenticating a user properly and it can lead to access to user accounts. Affected API: https://www.instacart.com/api/v2/users/googleloginauth In this request, these are the parameters: accesstoken, clientid,idtoken,...

meetup.com XSS vulnerability

Vulnerable URL: https://www.meetup.com/LangleyandSurreyActivites/?prevstarttime="%3E%3Csvg onload = alertOPENBUGBOUNTY id=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 566 VIP...

secure.meetup.com XSS vulnerability

Vulnerable URL: https://secure.meetup.com/register/?keyword=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%3Cimg/onerror=%27;alert%28/XSSPOSED/%29;%27src=1%3E Details: Description| Value ---|--- Patched:| Yes, at 28.03.2016 Latest check for patch:| 28.03.2016 01:24 GMT Vulnerability type:| XSS...

Встреча Defcon Moscow #9

3 июля, в пятницу, в офисе Mail.Ru Group состоится девятая встреча Defcon Moscow, которую организует группа DC7499. Defcon Moscow — это открытое и независимое сообщество технических энтузиастов, приближенных к области высоких технологий, а также информационной и технической безопасности. Программ...

PT-2024-34260 · Meetup · Meetup

Name of the Vulnerable Software and Affected Versions: Meetup versions 0.1 and earlier Description: The issue affects Meetup, allowing privilege escalation through an authorization bypass. This is due to a user-controlled key vulnerability. Recommendations: For versions 0.1 and earlier, at the...