cafe-hofburg.at Cross Site Scripting vulnerability

Security Researcher Broly157 Helped patch 1560 vulnerabilities Received 7 Coordinated Disclosure badges Received 15 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting cafe-hofburg.at website and its users. Following...

_GCafé 3.0 - (gbClienService) Unquoted Service Path Vulnerability

Exploit Title: GCafé 3.0 - 'gbClienService' Unquoted Service Path Exploit Author: Doan Nguyen 4ll4u Vendor Homepage: https://gcafe.vn/ Software Link: https://gcafe.vn/post/view?slug=gcafe-3.0 Version: v3.0 Tested on: Windows 7, Win 10, WinXP CVE : N/A Description: GCafé 3.0 - Internet Cafe is a...

_GCafé 3.0 - 'gbClienService' Unquoted Service Path

Exploit Title: GCafé 3.0 - 'gbClienService' Unquoted Service Path Google Dork: N/A Date: 2019-11-09 Exploit Author: Doan Nguyen 4ll4u Vendor Homepage: https://gcafe.vn/ Software Link: https://gcafe.vn/post/view?slug=gcafe-3.0 Version: v3.0 Tested on: Windows 7, Win 10, WinXP CVE : N/A Description...

GCafe 3.0 Unquoted Service Path

Exploit Title: GCafé 3.0 - 'gbClienService' Unquoted Service Path Google Dork: N/A Date: 2019-11-09 Exploit Author: Doan Nguyen 4ll4u Vendor Homepage: https://gcafe.vn/ Software Link: https://gcafe.vn/post/view?slug=gcafe-3.0 Version: v3.0 Tested on: Windows 7, Win 10, WinXP CVE : N/A Description...

Rest - Cafe and Restaurant Website CMS - slug SQL Injection

Rest - Cafe and Restaurant Website CMS - slug SQL Injection Exploit Title: Rest - Cafe and Restaurant Website CMS - SQL Injection Date: 1.8.2019. Exploit Author: n1x MS-WEB Vendor Homepage: https://codecanyon.net/item/rest-cafe-and-restaurant-website-cms/21630154 CWE : CWE-89 Vulnerable parameter...

Rest - Cafe and Restaurant Website CMS - 'slug' SQL Injection

Exploit Title: Rest - Cafe and Restaurant Website CMS - SQL Injection Date: 1.8.2019. Exploit Author: n1x MS-WEB Vendor Homepage: https://codecanyon.net/item/rest-cafe-and-restaurant-website-cms/21630154 CWE : CWE-89 Vulnerable parameter: slug news.php GET Request GET //host/path/news.php?slug=x'...

GHSA-6Q8Q-RVF4-M4PG dalek-browser-chrome Downloads Resources over HTTP

Affected versions of dalek-browser-chrome insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution ...

grandcanyon.cafe XSS vulnerability

Open Bug Bounty ID: OBB-588473 Description| Value ---|--- Affected Website:| grandcanyon.cafe Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cafe-leven.de XSS vulnerability

Open Bug Bounty ID: OBB-582402 Description| Value ---|--- Affected Website:| cafe-leven.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

Mail.ru: XSS on account.mail.ru/login

Уязвимость на станице https://account.mail.ru/login и подготовка файлов для атаки --------------------- В процессе исследования заметил, что на странице https://account.mail.ru/login не валидируется значение параметра v. Значение выводится на странице как есть и используется в пути до скрипта...

cafe.surfsite.nl Open Redirect vulnerability

Open Bug Bounty ID: OBB-404545 Description| Value ---|--- Affected Website:| cafe.surfsite.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

cafe-mexx.de XSS vulnerability

Open Bug Bounty ID: OBB-353372 Description| Value ---|--- Affected Website:| cafe-mexx.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cafe-mexx.de Open Redirect vulnerability

Open Bug Bounty ID: OBB-325986 Description| Value ---|--- Affected Website:| cafe-mexx.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Daum Cafe - 다음 카페 - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Daum Cafe - 다음 카페 published at the 'play' market has multiple vulnerabilities...

thegradcafe.com XSS vulnerability

Open Bug Bounty ID: OBB-226720 Description| Value ---|--- Affected Website:| thegradcafe.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Ezzcat - cafe catalog - BSD license, LGPL license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Ezzcat - cafe catalog published at the 'play' market has multiple vulnerabilities...

My Cafe: Recipes & Stories - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application My Cafe: Recipes & Stories published at the 'play' market has multiple vulnerabilities...

Cinderella Cafe - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Cinderella Cafe published at the 'play' market has multiple vulnerabilities...

Hello Kitty Cafe - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Hello Kitty Cafe published at the 'play' market has multiple vulnerabilities...