CVE-2023-52546

CVE-2023-52546 concerns Huawei HarmonyOS/EMUI Calendar app where package name verification can be bypassed. Root cause described across connected sources as an authentication bypass in the Calendar component, enabling potential confidentiality impact. CVSS metrics (NETWORK, HIGH impact to confide...

CVE-2023-52544

Huawei HarmonyOS and Huawei EMUI are affected by a file path bypass vulnerability located in the email module . The root cause is an improper limitation of a pathname to a restricted directory (CWE-22 ), which allows an attacker to bypass file path verification. Successful exploitation of this vu...

Always incorrect control flow in github.com/mojocn/base64Captcha

When using the default implementation of Verify to check a Captcha, verification can be bypassed. For example, if the first parameter is a non-existent id, the second parameter is an empty string, and the third parameter is true, the function will always consider the Captcha to be correct...

GHSA-5MMW-P5QV-W3X5 Always incorrect control flow in github.com/mojocn/base64Captcha

When using the default implementation of Verify to check a Captcha, verification can be bypassed. For example, if the first parameter is a non-existent id, the second parameter is an empty string, and the third parameter is true, the function will always consider the Captcha to be correct...

iu.myschooling.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1149240 Security Researcher DakkarKey Helped patch 407 vulnerabilities Received 6 Coordinated Disclosure badges Received 14 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting iu.myschooling.net websit...