Infogram: Bruteforcing Coupons

Hi, while i was fuzzing for an API endpoints i found this endpoint: https://infogram.com/api/discounts the first thing came on my mind is bruteforcing the coupon codes so i gave it a try and it worked! there's no rate limit on that endpoint so an attacker could use it to bruteforce the coupon cod...

CVE-2017-1148

The CVE-2017-1148 entry applies to IBM OpenPages GRC Platform versions 7.2–7.3 with the OpenPages Loss Event Entry (LEE) application. The root cause is described as insecure object reference leading to information disclosure of sensitive data, including private APIs, which could be leveraged for ...

vpgame.com XSS vulnerability

Open Bug Bounty ID: OBB-382411 Description| Value ---|--- Affected Website:| vpgame.com Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet Vulnerable URL:...

api.modernweekly.com XSS vulnerability

Open Bug Bounty ID: OBB-363653 Description| Value ---|--- Affected Website:| api.modernweekly.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

CVE-2017-1000093

Summary: CVE-2017-1000093 pertains to the Jenkins Poll SCM Plugin, which failed to require API requests to be sent via POST, exposing it to Cross-Site Request Forgery attacks. This could allow an attacker to initiate polling of projects with a known name. The issue undermines the plugin’s permiss...

DEBIAN-CVE-2015-5607

Cross-site request forgery in the REST API in IPython 2 and 3...

ludovox.fr XSS vulnerability

Vulnerable URL: http://ludovox.fr/wp-content/plugins/ldvx-profile/api.php?container=no=Publication=listname=shanouillette=%22/%3E%3CsvG/onLoad=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.12.2017 Vulnerability type:| XSS Vulnerability status...

data.qld.gov.au XSS vulnerability

Vulnerable URL: https://data.qld.gov.au/api/1/util/snippet/apiinfo.html?resourceid=e88943c0-5968-4972-a15f-38e120d72ec0rooturl=javascript:alert/OPENBUGBOUNTY/// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.12.2017 Vulnerability type:| XSS Vulnerability status:|...

CVE-2015-2750

CVE-2015-2750 is an open redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 that allows remote attackers to redirect users to arbitrary sites and facilitate phishing via the // sequence. The issue affects Drupal’s URL-related API functions; there is no exploitation detail in the...

Syntribos: An Open Source API Security Testing Tool

PenTestIT RSS Feed Web application security testing is a multi-faceted and yet important domains today. A few years ago, it was only the front end security tests and then came the backend. As newer endpoints are being exposed, it becomes imperative to test their security too. Syntribos is one suc...

api.kostprice.com XSS vulnerability

Open Bug Bounty ID: OBB-276493 Description| Value ---|--- Affected Website:| api.kostprice.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

api.lcc.org XSS vulnerability

Vulnerable URL: http://api.lcc.org/resources/stewardship/MemberRegisterpg.asp?afterbanquet=1/-///'/"//--...

Join Wallarm at ISSA’s Cornerstones of Trust event on June 20th

Next week, local chapter of Information Systems Security Association check them out at http://www.sv-issa.org is organizing a focused security conference looking into the issues of securing end users, enterprise technologies and security processes. Come meet Wallarm to learn about trends and best...

api.bounceexchange.com XSS vulnerability

Vulnerable URL: https://api.bounceexchange.com/capture/submit?callback=%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 04.10.2017 Latest check for patch:| 04.10.2017 15:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

CVE-2016-6335

CVE-2016-6335 affects MediaWiki: versions prior to 1.23.15, 1.26.x prior to 1.26.4, and 1.27.x prior to 1.27.1. The vulnerability allows remote attackers to obtain sensitive information via a parse action to api.php due to failure to generate head items in the context of a given title. Impact is ...

CVE-2017-7283

CVE-2017-7283 affects Unitrends Enterprise Backup prior to 9.1.2. An authenticated user can trigger arbitrary OS command execution by supplying a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php. The NVD data...

Kong and Wallarm Partner Up to Boost Microservices API Security

Wallarm has partnered with Mashape to provide the microservices community with API security. Mashape enterprise customers who use Kong API gateway can now quickly add API security protection without change in Kong user’s deployment. Read more about Kong and Wallarm partnership in this blog. Today...

math.js remote code execution vulnerability

This article explains in short how we found, exploited and reported a remote code execution RCE vulnerability. It is meant to be a guide to finding vulnerabilities, as well as reporting them in a responsible manner. Step one: discovery While playing around with a wrapper of the math.js API...

shellcode programming: in memory in the parsing API to address-vulnerability warning-the black bar safety net

For Windows all with position-independent code, PIC core feature is based on a real-time analysis the API function address. It is a very important task. Here I introduce two popular methods, the use of the import address table IAT, and export address table to EAT is by far the most stable method...

Showmax: Changing details of other users profile using UUID (IDOR)

Access token uniquely maps to particular user record, which is then the only one accessible to user when doing API calls. Issue arise when intermediate service had used service token to update the user record. That allowed accessing user details of other user that the current access token belongs...