1501 matches found
CloudFlare <= 1.3.20 - Authenticated Cross-Site Scripting (XSS)
The Cloudflare WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...
HackerOne: Hogging up all the resources on hackerone.com
Please note. I believe that some of the issues described below can also be used on their own and/or combined in other configurations to achieve different results, e.g. "paying" a bounty of zero or team avoiding to resolve and unpleasant issue. I am however describing the very likely doomsday...
HackerOne: Putting link inside link in markdown
Hello. I was playing around in markdown editor and find 1 interesting feature. You can put a link inside link. ololol l l:http://dwq If you do it ololol will be parsed first, then result of parsing will be send outside. Maximum depth of such link inserting is 16. So the slowest thing we can do is...
Cloudflare: Clickjacking : https://partners.cloudflare.com/
Hey, The title of submission defines the issue very clearly which is clickjacking at https://partners.cloudflare.com/ this subdomain missing x frame headers. As this subdomain contain a partner login then it is dangerous to have this type of issue. You understand better what i mean ; Attached a...
HackerOne: CSRF possible when SOP Bypass/UXSS is available
Description If an attacker could extract content from https://hackerone.com, they could perform CSRF attacks due to the fact that: 1. Some pages prints the token in the HTML response edit user form at https://hackerone.com/settings/profile/edit 2. Tokens aren't bound per action 3. PATCH/DELETE ca...
Algolia: Stored XSS on https://www.algolia.com/realtime-search-demo/*
Description When you generate a UI demo, the values of the Attributes are not escaped when printed in the page of the demo. There is a protection by CloudFlare, but because the values of the Attributes are printed in Javascript code, I found a way to abuse this to execute Javascript code. Seems...
The “Unhackable” WordPress Blog – Finding Security In the Static
Using the word “unhackable” is generally considered a bad ideaTM due to this being a largely unobtainable feat with software. In this post I attempt to get as close to “unhackable” as possible with my own personal blog the one you’re reading right now. I have designed the process in such a way th...
BitTorrent Fixes Reflective DDoS Attack Security Flaw
Two weeks ago, we reported how a serious flaw in the popular peer-to-peer BitTorrent file sharing protocols could be exploited to carry out a devastating distributed denial of service DDoS attack, allowing lone hackers with limited resources to take down large websites. Good news is that the...
CloudFlare Transparency Report Shows Spike in Court Orders
In its latest transparency report, CloudFlare says that the number of subpoenas it has received has remained steady since last year, but the volume of court orders has more than doubled since the second half of last year. While much of the data from CloudFlare’s report for the first half of 2015...
IIS the latest high-risk Vulnerability, CVE-2 0 1 5-1 6 3 5, AND MS15-0 3 4. THE POC and online detection of source-vulnerability warning-the black bar safety net
! HTTP. sys remote code execution vulnerability, CVE-2 0 1 5-1 6 3 5, AND MS15-0 3 4. the A remote code execution vulnerability exists in the HTTP Protocol stack HTTP.sys, when the HTTP.sys not correct parsing specially crafted HTTP request to cause this vulnerability. Successful exploitation of...
CloudFlare Deploys ChaCha20-Poly1305 Encryption Across Sites
After rolling out free SSL for its users last fall, CloudFlare has deployed a new level of encryption on its service that hardens and speeds up the user experience, especially when accessing domains via mobile browsers. The form of encryption, a relatively new transport layer cipher suite known a...
The Pirate Bay relaunch is FBI's Honeypot? Pirate Bay Team Responds,'NO WAY'
After almost two months of untimely and unexpected outage, The Pirate Bay TPB finally came back this weekend. But the re-launch of the infamous torrent-indexing website raised a question among those suspicious about this new setup — Is it really The Pirate Bay? A few days back we reported that Th...
CloudFlare Rolls Out Free SSL
In a move that will essentially double the number of SSL-protected sites on the Web in the space of 24 hours, CloudFlare on Monday said that it was enabling SSL for all of its more than two million customers for free. The new service is called Universal SSL, and the company is making it available...
Cloudflare: Apache mod_negotiation filename bruteforcing
Vulnerability description modnegotiation is an Apache module responsible for selecting the document that best matches the clients capabilities, from one of several available documents. If the client provides an invalid Accept header, the server will respond with a 406 Not Acceptable error...
Cloudflare: User can request for password reset link without giving his website, eventhough he have it
Hi, I found that , when a user ask for password reset at https://www.cloudflare.com/login He need to give his email address as well as one of the sites if he have . But your site is sending password reset link to the user who have added websites to his account , but not entering any one of the na...
Cloudflare: Potential XSS vulnerability to HTML minification
I have already reported it through email but I was advised to post it here. Original request: https://support.cloudflare.com/hc/requests/166005 The issue --------- The HTML minification function optimizes the HTML content without validating the HTML syntax. In particular circumstances this may le...
Dramatic Drop in Vulnerable NTP Servers Used in DDoS Attacks
While patching of webservers vulnerable to the Heartbleed OpenSSL bug may have stalled, the same cannot be said about repairs to NTP servers that could be leveraged in devastating amplification attacks. A spate of distributed denial-of-service attacks DDoS tore through companies in January and...
Largest DDoS Attack Hit Hong Kong Democracy Voting Website
Hackers and cyber attacks are getting evil and worst nightmare for companies day-by-day. Just last week a group of hackers ruined the code-hosting and software collaboration platform, ‘Code Spaces’ by destroying their Amazon cloud server, complete data and its backup files too. Recently, the...
Cloudflare: CSRF and No password requirement in this URL Billing Info
An attacker can launch requests on his victim's behalf on the billing info page. There is a requirement of CSRF token on this page https://www.cloudflare.com/billing-information Awaiting your reply...
Cloudflare: Password reset threshold not set
Your web application https://www.cloudflare.com does not have a password reset threshold set. this means that your client and users account can be flooded with password reset emails which can result in spam to the mailer's inbox. You should implement a threshold to prevent this attack...