recipe-blog.jp XSS vulnerability

Open Bug Bounty ID: OBB-547512 Description| Value ---|--- Affected Website:| recipe-blog.jp Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure base...

Open Source Threat Intelligence Gathering & Processing Framework: GOSINT

The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise IOCs. GOSINT allows a security analyst to collect and standardize structured and unstructured threat intelligence. Applying threat intelligence to security operations enriches...

Instacart: XSS at in instacart.com/store/partner_recipe

Summary Hi team, i found that this endpoint - https://www.instacart.com/store/partnerrecipe? at param imageurl is vulnerable to XSS Reproduction Steps & PoC 1Go to...

Joomla component Recipe Manager v2. 2 parameter id SQL injection vulnerability

Joomla! Component Recipe Manager v2. 2 - SQL Injection Joomla! Component Recipe Manager v2. 2, The presence of the parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can be directly used Injection point:...

recipe manager, 2.2

recipe manager by joomla6teen.com, 2.2, SQL Injection...

Recipe Manager Component 'id' Parameter SQL Injection Vulnerability

Joomla! is an open source content management system CMS, the system provides RSS feeds, site search and other functions. A SQL injection vulnerability exists in the 'id' parameter of the Recipe Manager component of Joomla! which can be exploited by attackers to access or modify database data...

Joomla Recipe Manager 2.2 SQL Injection

Exploit Title: Joomla! Component Recipe Manager v2.2 - SQL Injection Google Dork: inurl:index.php?option=comrecipe Date: 02.03.2017 Vendor Homepage: http://joomla6teen.com/ Software: https://extensions.joomla.org/extensions/extension/vertical-markets/thematic-directory/recipe-manager/ Demo:...

Joomla Recipe Manager 2.2 Component - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Recipe Manager v2.2 - SQL Injection Google Dork: inurl:index.php?option=comrecipe Date: 02.03.2017 Vendor Homepage: http://joomla6teen.com/ Software:...

Joomla! Component Recipe Manager 2.2 - id SQL Injection

Joomla! Component Recipe Manager 2.2 - id SQL Injection Exploit Title: Joomla! Component Recipe Manager v2.2 - SQL Injection Google Dork: inurl:index.php?option=comrecipe Date: 02.03.2017 Vendor Homepage: http://joomla6teen.com/ Software:...

Joomla! Component Recipe Manager 2.2 - 'id' SQL Injection

Exploit Title: Joomla! Component Recipe Manager v2.2 - SQL Injection Google Dork: inurl:index.php?option=comrecipe Date: 02.03.2017 Vendor Homepage: http://joomla6teen.com/ Software: https://extensions.joomla.org/extensions/extension/vertical-markets/thematic-directory/recipe-manager/ Demo:...

DD replication causes panic error on the target Data Domain server

Challenge You have configured a Data Domain Storage Unit as a Veeam backup repository using MTree replication. Data Domain replication results in PANIC on the target Data Domain storage. Cause Veeam Backup & Replication leverages the Virtual Synthetic VS feature of the DD Boost library for buildi...

Apache Groovy CVE-2016-6814 Remote Code Execution Vulnerability

Description Apache Groovy is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition. Apache Groovy 2.4.4...

Instacart: XSS in instacart.com/store/partner_recipe

Please open the following url...

Donut Recipe: Pastry Chef Kids - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Donut Recipe: Pastry Chef Kids published at the 'play' market has multiple vulnerabilities...

Herobrine Craft: Magic Recipe - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Herobrine Craft: Magic Recipe published at the 'play' market has multiple vulnerabilities...

My CookBook (Recipe Manager) - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application My CookBook Recipe Manager published at the 'play' market has multiple vulnerabilities...

barilla.com.br XSS vulnerability

Vulnerable URL: http://www.barilla.com.br/receitasecardapios/procurarreceitas/searchricette.jsp?ingrediente=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=ingrediente+ingredientebarilla=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=Barilla-ricette-br=5=5 Details: Description| Val...

mealplannerpro.ca XSS vulnerability

Vulnerable URL:...

Rapid-Source Rapid-Recipe Component Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/27724/info Rapid-Recipe is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

Maian Recipe <= 1.2 Insecure Cookie Handling Vulnerability

No description provided by source. -+================================================================================+- -+ Maian Recipe = v1.2 Insecure Cookie Handling Vulnerability +- -+================================================================================+- Discovered By: S.W.A.T...