512 matches found
Rest - Cafe and Restaurant Website CMS - 'slug' SQL Injection
Exploit Title: Rest - Cafe and Restaurant Website CMS - SQL Injection Date: 1.8.2019. Exploit Author: n1x MS-WEB Vendor Homepage: https://codecanyon.net/item/rest-cafe-and-restaurant-website-cms/21630154 CWE : CWE-89 Vulnerable parameter: slug news.php GET Request GET //host/path/news.php?slug=x'...
GHSA-6Q8Q-RVF4-M4PG dalek-browser-chrome Downloads Resources over HTTP
Affected versions of dalek-browser-chrome insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution ...
grandcanyon.cafe XSS vulnerability
Open Bug Bounty ID: OBB-588473 Description| Value ---|--- Affected Website:| grandcanyon.cafe Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
cafe-leven.de XSS vulnerability
Open Bug Bounty ID: OBB-582402 Description| Value ---|--- Affected Website:| cafe-leven.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
This Week in Security News
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...
Mail.ru: XSS on account.mail.ru/login
Уязвимость на станице https://account.mail.ru/login и подготовка файлов для атаки --------------------- В процессе исследования заметил, что на странице https://account.mail.ru/login не валидируется значение параметра v. Значение выводится на странице как есть и используется в пути до скрипта...
cafe.surfsite.nl Open Redirect vulnerability
Open Bug Bounty ID: OBB-404545 Description| Value ---|--- Affected Website:| cafe.surfsite.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
cafe-mexx.de XSS vulnerability
Open Bug Bounty ID: OBB-353372 Description| Value ---|--- Affected Website:| cafe-mexx.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
cafe-mexx.de Open Redirect vulnerability
Open Bug Bounty ID: OBB-325986 Description| Value ---|--- Affected Website:| cafe-mexx.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
Daum Cafe - 다음 카페 - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Daum Cafe - 다음 카페 published at the 'play' market has multiple vulnerabilities...
thegradcafe.com XSS vulnerability
Open Bug Bounty ID: OBB-226720 Description| Value ---|--- Affected Website:| thegradcafe.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Ezzcat - cafe catalog - BSD license, LGPL license, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application Ezzcat - cafe catalog published at the 'play' market has multiple vulnerabilities...
My Cafe: Recipes & Stories - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application My Cafe: Recipes & Stories published at the 'play' market has multiple vulnerabilities...
Cinderella Cafe - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Cinderella Cafe published at the 'play' market has multiple vulnerabilities...
Hello Kitty Cafe - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities
HackApp vulnerability scanner discovered that application Hello Kitty Cafe published at the 'play' market has multiple vulnerabilities...
cafedecoral.com XSS vulnerability
Vulnerable URL: http://cafedecoral.com/eng/main/alerts.jsp?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 648466 Google Pagerank...
Cash cow Internet cafe management software+chain cafe version are there any files traversal download vulnerability-vulnerability warning-the black bar safety net
From the official website to download the latest version of cash cow Internet cafe management software size: 113M Release: 2 0 1 49 2 0release date: 2014-11-12 and cash cow Internet cafe management software chain Internet cafe Edition size: 121M version: 2 0 1 49 2 0 release date: 2014-11-22 foun...
Futomi CGI Cafe MP Form Mail CGI eCommerce Arbitrary Code Execution Vulnerability
Futomi CGI Cafe MP Form Mail CGI eCommerce on Windows is a Windows-based CGI for sending emails from Web forms by Futomi Japan. A security vulnerability exists in Futomi CGI Cafe MP Form Mail CGI eCommerce on Windows platform prior to version 2.0.12. A remote attacker can exploit the vulnerabilit...
