239 matches found
Vimeo: Buying ondemand videos that 0.1 and sometimes for free
hello sir this is N B Sri Harsha I Have found an IDOR where we can buy ondemand videos for free but i tested on 0.1$ here is what you should do go any ondemand video like https://vimeo.com/ondemand/snowman click on buy ! start the burp , you wil get an request like this POST...
Vimeo: Misconfigured crossdomain.xml - vimeo.com
An overly permissive crossdomain.xml file on a domain that serves sensitive content is a major security risk. It exposes the domain hosting the improperly configured crossomain.xml file to information disclosure and request forgery. Attackers cannot only forge requests, they can read responses...
Vimeo: APIs for channels allow HTML entities that may cause XSS issue
Hello, I found Vimeo's bug bounty program on 1. Please find below details of a security issue I found. First, APIs for channels 2 allow you to put HTML and javascript to name or description of a channel. For example, an attacker can use a Python script like the following to put javascript to an...
Vimeo: Vimeo.com Insecure Direct Object References Reset Password
Hello, my name is Toufik Airane. This is Responsible Disclosure and Silent Disclosure. Thanks you to opened bug bounty program! Please find a proof of concept for IDOR attack on famous vimeo.com. With this IDOR, attacker can reset any password, of any account and take controle of it. Please, find...
Vimeo: Vimeo.com - reflected xss vulnerability
Hi. I want to report a Reflected xss vulnerability that I found in www.vimeo.com website and which can affect the safety of your users. This vulnerability allows an attacker to inject in web pages javascript content for sending malicious scripts to an unsuspecting user. This flaw can access any...
Vimeo: Vimeo.com - Reflected XSS Vulnerability
Hi. I want to report a Reflected xss vulnerability that I found in www.vimeo.com website and which can affect the safety of your users. This vulnerability allows an attacker to inject in web pages javascript content for sending malicious scripts to an unsuspecting user. This flaw can access any...
Indian Government blocks 32 Sites, including GitHub, Pastebin, Imgur and Vimeo
China is known as the nation of 'global internet censorship', and the country proved it many times, in fact when recently it blocked the access to Gmail from the country. Now, it seems that its northern neighbouring country, India doesn't want to get left behind. On Wednesday, the Indian Computer...
Vimeo: [vimeopro.com] CRLF Injection
PoC for any browser other than FireFox http://www.vimeopro.com/crlftest%0dSet-Cookie:test=test;domain=.vimeopro.com HTTP Response: HTTP/1.1 301 Moved Permanently\r\n Date: Fri, 12 Dec 2014 19:28:49 GMT\r\n Server: Apache\r\n Location: http://vimeopro.com/crlftest\r...
Joomla Component TTVideo 1.0 - SQL Injection Vulnerability
No description provided by source. TTVideo 1.0 Joomla Component SQL Injection Vulnerability Download link: http://www.toughtomato.com/resources/downloads/joomla-1.5/components/ttvideo/ Name TTVideo Vendor http://www.toughtomato.com Versions Affected 1.0 Author Salvatore Fresta aka Drosophila...
Stable Channel Update for Chrome OS
Update 5 Sept 10 am PDT - 21 Stable wifi issues are resolved, we are rolling out a new update to 21.0.1183.89 Platform version: 2268.142.0 The Google Chrome team is happy to announce the arrival of Chrome 21 to the Stable Channel for Chrome OS. More detailed updates are available on the Google...
vBulletin 4.1.7 => 4.1.10 XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: vBulletin 4.1.7 = 4.1.10 XSS Vulnerability Google Dork: intitle: powered by vBulletin 4.1.10 Date: 20/02/2012 Author: .e0f Software Link: http://www.vbulletin.com/ Version: 4.1.10 Others not tested Tested on: BackTrack 5 |...
Vimeo (Brazil) Video Sharing site got hacked by Terminal_pk
Vimeo Brazil Video Sharing site got hacked by Terminalpk Today a hacker with codename "Terminalpk" Hack and Deface the Brazilian Domain of Famous Video Sharing site "Vimeo". Mirror of Defacement Can be seen here...
Vimeo (Brazil) Video Sharing site got hacked by Terminal_pk
Vimeo Brazil Video Sharing site got hacked by Terminalpk Today a hacker with codename "Terminalpk" Hack and Deface the Brazilian Domain of Famous Video Sharing site "Vimeo". Mirror of Defacement Can be seen here...
Joomla TTVideo 1.0 SQL Injection
TTVideo 1.0 Joomla Component SQL Injection Vulnerability Name TTVideo Vendor http://www.toughtomato.com Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-07-27 X. INDEX I. ABOUT THE APPLICATION II...
TTVideo 1.0 Joomla Component SQL Injection Vulnerability
TTVideo 1.0 Joomla Component SQL Injection Vulnerability Name TTVideo Vendor http://www.toughtomato.com Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-07-27 X. INDEX I. ABOUT THE APPLICATION II...
Joomla Component TTVideo 1.0 SQL Injection Vulnerability
Exploit for php platform in category web applications ======================================================== Joomla Component TTVideo 1.0 SQL Injection Vulnerability ======================================================== TTVideo 1.0 Joomla Component SQL Injection Vulnerability Download link:...
Joomla Component TTVideo 1.0 SQL Injection Vulnerability
No description provided by source. TTVideo 1.0 Joomla Component SQL Injection Vulnerability Download link: http://www.toughtomato.com/resources/downloads/joomla-1.5/components/ttvideo/ Name TTVideo Vendor http://www.toughtomato.com Versions Affected 1.0 Author Salvatore Fresta aka Drosophila...
Joomla! Component TTVideo 1.0 - SQL Injection
Joomla! Component TTVideo 1.0 - SQL Injection TTVideo 1.0 Joomla Component SQL Injection Vulnerability Download link: http://www.toughtomato.com/resources/downloads/joomla-1.5/components/ttvideo/ Name TTVideo Vendor http://www.toughtomato.com Versions Affected 1.0 Author Salvatore Fresta aka...
