fine-coffee-gourmet.com Improper Access Control vulnerability OBB-3816105

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hama-coffee.ocnk.net Cross Site Scripting vulnerability OBB-3809848

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Building our Team in Prague: Meet Martin Votruba

From developing driver-assistance software for a luxury car brand to jumping on board an NFT startup, Martin Votruba, Lead Software Engineer, is not one to shy away from a challenge. In September of 2023, joined Rapid7 as the first hire in its new Prague office. Martin is leveraging Rapid7’s...

arizonacoffee.com Improper Access Control vulnerability OBB-3793215

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-39056

An information leak in Coffee-jumbo v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39056

An information leak in Coffee-jumbo v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39056

An information leak in Coffee-jumbo v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

Information disclosure

An information leak in Coffee-jumbo v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39056

An information leak in Coffee-jumbo v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39056

CVE-2023-39056 affects Coffee-jumbo v13.6.1. The vulnerability is an information leak enabling an attacker to obtain the channel access token and send crafted messages. The available sources confirm the affected product and impact but do not provide root-cause details or mitigations. Exploitation...

Coffee-jumbo Security Vulnerability

Coffee-jumbo is an application from Coffee-jumbo, Inc. A security vulnerability exists in Coffee-jumbo version v13.6.1, which stems from the presence of an information disclosure vulnerability. An attacker can exploit the vulnerability to obtain a channel access token and send a malicious message...

CVE-2023-39056

An information leak in Coffee-jumbo v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-2078

The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the recievepost, bmcdisconnect, namepost, and widgetpost functions in versions up to, and including, 3.7. This makes it possible for...

CVE-2023-2078

The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the recievepost, bmcdisconnect, namepost, and widgetpost functions in versions up to, and including, 3.7. This makes it possible for...

CVE-2023-2079

The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the recievepost, bmcdisconnect, namepost, and widgetpost functions in versions up to, and including, 3.7. This makes it possible for unauthenticated...

Cross site request forgery (csrf)

The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the recievepost, bmcdisconnect, namepost, and widgetpost functions in versions up to, and including, 3.7. This makes it possible for unauthenticated...

CVE-2023-2078

Affected software/trigger : WordPress plugin “Buy Me a Coffee” (Button and Widget Plugin)

CVE-2023-2079

CVE-2023-2079 concerns the WordPress plugin Buy Me a Coffee – Button and Widget Plugin . The issue is a Cross-Site Request Forgery (CSRF) flaw caused by missing nonce validation in the functions recieve_post, bmc_disconnect, name_post, and widget_post , affecting versions up to and including 3.7....

WordPress Plugin Buy Me a Coffee – Button and Widget 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

WordPress Plugin Buy Me a Coffee – Button and Widget 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...