258 matches found
GraphQL Playground Cross-Site Scripting Vulnerability
GraphQL Playground is a graphical, interactive, in-browser GraphQL IDE Integrated Development Environment based on GraphiQL from Prisma Labs, Germany. A cross-site scripting vulnerability exists in GraphQL Playground graphql-playground-html NPM package. A remote attacker can exploit this...
CVE-2020-4038
GraphQL Playground graphql-playground-html NPM package before version 1.6.22 have a severe XSS Reflection attack vulnerability. All unsanitized user input passed into renderPlaygroundPage method could trigger this vulnerability. This has been patched in graphql-playground-html version 1.6.22. Not...
CVE-2020-4038
GraphQL Playground graphql-playground-html NPM package before version 1.6.22 have a severe XSS Reflection attack vulnerability. All unsanitized user input passed into renderPlaygroundPage method could trigger this vulnerability. This has been patched in graphql-playground-html version 1.6.22. Not...
Design/Logic Flaw
GraphQL Playground graphql-playground-html NPM package before version 1.6.22 have a severe XSS Reflection attack vulnerability. All unsanitized user input passed into renderPlaygroundPage method could trigger this vulnerability. This has been patched in graphql-playground-html version 1.6.22. Not...
CVE-2020-4038 Reflected XSS in GraphQL Playground
GraphQL Playground graphql-playground-html NPM package before version 1.6.22 have a severe XSS Reflection attack vulnerability. All unsanitized user input passed into renderPlaygroundPage method could trigger this vulnerability. This has been patched in graphql-playground-html version 1.6.22. Not...
CVE-2020-4038
The CVE-2020-4038 entry concerns GraphQL Playground (graphql-playground-html) with an XSS reflection vulnerability in versions before 1.6.22, triggered by unsanitized input rendered in renderPlaygroundPage(). A patch is available in graphql-playground-html v1.6.22, and related middleware packages...
PHP-FPM + Nginx - Remote Code Execution
PHuiP-FPizdaM What's this This is an exploit for a bug in php-fpm CVE-2019-11043. In certain nginx + php-fpm configurations, the bug is possible to trigger from the outside. This means that a web user may get code execution if you have vulnerable config see below. What's vulnerable If a webserver...
SALT - SLUB ALlocator Tracer For The Linux Kernel
Welcome to salt , a tool to reverse and learn kernel heap memory management. It can be useful to develop an exploit, to debug your own kernel code, and, more importantly, to play with the kernel heap allocations and learn its inner workings. This tool helps tracing allocations and the current sta...
Fake Beto O'Rourke Texts Expose New Playground for Trolls
Someone hijacked a volunteer tool to make it look like Beto O'Rourke encouraged voter fraud—and that could just be the beginning...
Playground for kids - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Playground for kids published at the 'play' market has multiple vulnerabilities...
ABC Playground for Kids FREE - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities
HackApp vulnerability scanner discovered that application ABC Playground for Kids FREE published at the 'play' market has multiple vulnerabilities...
Spotty and Friends Playground - Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Spotty and Friends Playground published at the 'play' market has multiple vulnerabilities...
Logic Playground Games FREE - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities
HackApp vulnerability scanner discovered that application Logic Playground Games FREE published at the 'play' market has multiple vulnerabilities...
Zoo Playground: Games for kids - External URLs, Native code usage, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Zoo Playground: Games for kids published at the 'play' market has multiple vulnerabilities...
Virtual City Playground® - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Virtual City Playground® published at the 'play' market has multiple vulnerabilities...
m2me.co.kr XSS vulnerability
Vulnerable URL: http://www.m2me.co.kr:5000/playground/mycontentdel.asp?userphone=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=memo=1811 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:07 GMT Vulnerability type:| XSS Vulnerability status:|...
playground.ru Open Redirect vulnerability
Open Bug Bounty ID: OBB-55524 Description| Value ---|--- Affected Website:| playground.ru Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerabl...
Hacker exposes 40,000 Credit Cards from Digital Playground
Hacker exposes 40,000 Credit Cards from Digital Playground A new hacking group called The Consortium has hit the scene and their first take down is the porn site Digital Playground deface it and Mirror is available here. Everything, including credit card information, was stored in plain text. "Th...