CVE-2018-5451

CVE-2018-5451 is tied to Philips Alice 6 System. The connected update (ICSMA-18-086-01) confirms an improper authentication vulnerability (CWE-287) where, when an actor claims an identity, the system does not adequately verify it, potentially exposing resources or functionality to unintended acto...

summerland-key-hurricane-lawyer-insurance-claim-damage.com XSS vulnerability

Open Bug Bounty ID: OBB-586735 Description| Value ---|--- Affected Website:| summerland-key-hurricane-lawyer-insurance-claim-damage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting ...

stuart-hurricane-lawyer-insurance-claim-damage.com XSS vulnerability

Open Bug Bounty ID: OBB-586728 Description| Value ---|--- Affected Website:| stuart-hurricane-lawyer-insurance-claim-damage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79...

port-charlotte-hurricane-lawyer-insurance-claim-damage.com XSS vulnerability

Open Bug Bounty ID: OBB-586558 Description| Value ---|--- Affected Website:| port-charlotte-hurricane-lawyer-insurance-claim-damage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting ...

naples-hurricane-lawyer-insurance-claim-damage.com XSS vulnerability

Open Bug Bounty ID: OBB-586455 Description| Value ---|--- Affected Website:| naples-hurricane-lawyer-insurance-claim-damage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79...

miami-hurricane-lawyer-insurance-claim-damage.com XSS vulnerability

Open Bug Bounty ID: OBB-586031 Description| Value ---|--- Affected Website:| miami-hurricane-lawyer-insurance-claim-damage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79...

marathon-hurricane-lawyer-insurance-claim-damage.com XSS vulnerability

Open Bug Bounty ID: OBB-586009 Description| Value ---|--- Affected Website:| marathon-hurricane-lawyer-insurance-claim-damage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-...

key-west-hurricane-lawyer-insurance-claim-damage.com XSS vulnerability

Open Bug Bounty ID: OBB-585647 Description| Value ---|--- Affected Website:| key-west-hurricane-lawyer-insurance-claim-damage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-...

key-largo-hurricane-lawyer-insurance-claim-damage.com XSS vulnerability

Open Bug Bounty ID: OBB-585646 Description| Value ---|--- Affected Website:| key-largo-hurricane-lawyer-insurance-claim-damage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting /...

jupiter-hurricane-lawyer-insurance-claim-damage.com XSS vulnerability

Open Bug Bounty ID: OBB-585640 Description| Value ---|--- Affected Website:| jupiter-hurricane-lawyer-insurance-claim-damage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-7...

fort-myers-hurricane-lawyer-insurance-claim-damage.com XSS vulnerability

Open Bug Bounty ID: OBB-585479 Description| Value ---|--- Affected Website:| fort-myers-hurricane-lawyer-insurance-claim-damage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting /...

boca-raton-hurricane-lawyer-insurance-claim-damage.com XSS vulnerability

Open Bug Bounty ID: OBB-584302 Description| Value ---|--- Affected Website:| boca-raton-hurricane-lawyer-insurance-claim-damage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting /...

Keybase: Claiming ownership of GitHub handles via forked GitHub gists.

Description An attacker can claim ownership of a GitHub user's handle if the user forks the attacker's gist with a verification snippet generated by the attacker pointing towards the user's handle. PoC With my colleague's permission @jackds I claimed their GitHub handle with this gist:...

BELL-CVE-2018-2603 CVE-2018-2603 does not affect BellSoft software

Bulletin has no description...

Paragon Initiative Enterprises: [Critical] billion dollars issue

Hey, My name is El-Sisi also i have famous name is بلحه Balaha and i have found documents that confirm you the github inc belong to you. if you need this documents give me reward and i will give u that documents. why i'm doing this because my mother tell me if you see some things like that you mu...

epfoservices.in XSS vulnerability

Vulnerable URL: http://www.epfoservices.in/claimstatusinfo-newlogic.php?officename=1"...

How to configure ADFS Claim Rules and StoreFront with Multiple Domains

How to configure ADFS Claim Rules and StoreFront with multiple domains?...

DEBIAN-CVE-2017-6413

The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" aka modauthopenidc module before 2.1.6 for the Apache HTTP Server does not skip OIDCCLAIM and OIDCAuthNHeader headers in an "AuthType oauth20" configuration, which allows remote attackers to bypass authentication via crafted HTTP...

ABAX Triplog - Mileage claim - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ABAX Triplog - Mileage claim published at the 'play' market has multiple vulnerabilities...

Starbucks: Subdomain takeover on happymondays.starbucks.com due to non-used AWS S3 DNS record

Hi, I discovered that happymondays.starbucks.com DNS CNAME record is pointing to S3 AWS bucket which doesn't exist. Here's the screenshot of vulnerable domain: F138556 As happymondays.starbucks.com was free to register on AWS S3 service and DNS-setup is already correct set-up: F138557 I was able ...