CVE-2023-50730

CVE-2023-50730 affects Grackle, a Scala GraphQL server. The vulnerabilities arise from two stack-related issues: (1) cyclic GraphQL fragments could trigger a JVM StackOverflowError during type checking/compilation, and (2) the cats-parse recursive operator used in the parser isn’t stack-safe, ena...

CVE-2023-50730 Grackle has StackOverflowError in GraphQL query processing

Grackle is a GraphQL server written in functional Scala, built on the Typelevel stack. The GraphQL specification requires that GraphQL fragments must not form cycles, either directly or indirectly. Prior to Grackle version 0.18.0, that requirement wasn't checked, and queries with cyclic fragments...

cats-in-the-city.de Cross Site Scripting vulnerability OBB-3697423

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cats-in-the-city.de Cross Site Scripting vulnerability OBB-3688206

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

adventurecats.org Cross Site Scripting vulnerability OBB-3325112

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

blindhopecats.org Cross Site Scripting vulnerability OBB-3278239

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-20820 · Opencats · Opencats

Name of the Vulnerable Software and Affected Versions: OpenCATS version 0.9.7 Description: A Cross-Site Request Forgery CSRF issue allows attackers to force users into submitting web requests via unspecified vectors. Recommendations: For OpenCATS version 0.9.7, consider implementing anti-CSRF...

OpenCats 跨站脚本漏洞

OpenCATS is a leading open source applicant tracking system for recruiters and companies. A security vulnerability exists in OpenCats v0.9.7. An attacker could use the vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload into the state parameter of...

Seven Cats Free Fiction has a flawed logic vulnerability

Seven Cats Free Novels is a great full-length novel reading program. Seven Cats Free Novels suffers from a logic flaw vulnerability that can be exploited by attackers to inject malicious programs into the application...

Researcher Spotlight: Hector Peralta’s Evolution from Popcorn Server to the MSRC Leaderboards

“The bug bounty literally changed my life. Before this, I had nothing.” Coolest thing he purchased : His first vehicle! Best gift to give: Buying his nephew gaming accessories. Favorite Hacking Companion : His two cats. They’re always by his side when he is working late. Origin of his Hacker name...

150,000 Verkada security cameras hacked—to make a point

Hackers were able to gain access to camera feeds from Verkada, a tech company that specializes in video security and physical access control, to demonstrate how prevalent surveillance is, reports say. Unfortunately, it also exposed the inner workings of hospitals, clinics, and mental health...

Unauthorized access vulnerability in web services of Unicom optical cats HG6543C, HG6201U, HG2201U

China United Network Communications Group Corporation "China Unicom" is principally engaged in fixed communications business, mobile communications business, domestic and international communications facilities services, data communications business, network access business, various...

snowshoecatsuk.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-691869 Description| Value ---|--- Affected Website:| snowshoecatsuk.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

allposters.com XSS vulnerability

Open Bug Bounty ID: OBB-673581 Description| Value ---|--- Affected Website:| allposters.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

unicorn-list path traversal vulnerability

unicorn-list is a web framework for dynamically loading content using the .cats engine. A path traversal vulnerability exists in unicorn-list. An attacker can exploit this vulnerability by placing a '. /' sequence in a URL to gain access to the file system...

Smart related articles SQL Injection Vulnerability

Smart related articles is a content management system extension. An SQL injection vulnerability exists in Smart related articles 'dialog.php' for Joomla! An attacker must use the searchcats variable in the POST method to exploit this vulnerability and obtain sensitive database information...

CVE-2017-7628

The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php attacker must use searchcats variable in POST method to exploit this vulnerability...

Coloring Book: Cats ! FREE - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Coloring Book: Cats ! FREE published at the 'play' market has multiple vulnerabilities...

Cats puzzle - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Cats puzzle published at the 'play' market has multiple vulnerabilities...

Cats puzzle - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Cats puzzle published at the 'play' market has multiple vulnerabilities...