green-coffee-jankar.cz Cross Site Scripting vulnerability OBB-3108751

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Node WHOIS 安全漏洞

Node WHOIS is an open source WHOIS client for Node.js by Furqan Software. Node WHOIS has a security vulnerability that stems from a problem with an unknown function in the file index.coffee, which can lead to improperly controlled modifications of object prototype properties, resulting in prototy...

vk-coffee-com.ru Cross Site Scripting vulnerability OBB-3099063

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cofftea-shop.com Cross Site Scripting vulnerability OBB-2971286

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

Atlassian Confluence OGNL Injection POC Vulnerability CVE-202...

grinderscoffee.com.au Cross Site Scripting vulnerability OBB-2723437

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

thecoffeebreak.hu Cross Site Scripting vulnerability OBB-2686975

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in karma-coverage-coffee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a3094a8cd7786378913d8bd48c938f4a00547f3b77729b6fdcafd532216fe53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4108 Malicious code in karma-coverage-coffee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a3094a8cd7786378913d8bd48c938f4a00547f3b77729b6fdcafd532216fe53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1976 Malicious code in coffee-to-es2015-codemod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c30e7d3013316733fc720bd497c224af9abb1975bfb75271bd518a44ce11b4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Researchers Find Bluetooth Signals Can be Fingerprinted to Track Smartphones

A new research undertaken by a group of academics from the University of California San Diego has revealed for the first time that Bluetooth signals can be fingerprinted to track smartphones and therefore, individuals. The identification, at its core, hinges on imperfections in the Bluetooth...

mabo.coffee Cross Site Scripting vulnerability OBB-2404837

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PayloadsAllTheThings

It is an offensive tool for general-purpose payloads. The repository contains a list of supported funding platforms, including GitHub Sponsors, Ko-fi, and Buy Me a Coffee. The primary funding platform mentioned is GitHub Sponsors, with the username swisskyrepo. No specific exploit or vulnerabilit...

icscoffee.com Cross Site Scripting vulnerability OBB-2288296

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PayloadsAllTheThings

It is an offensive tool for general-purpose payloads. The repository contains a collection of payloads, but no specific exploit or vulnerability is identified. However, the presence of a GitHub Action workflow file .github/FUNDING.yml suggests that the repository may be used for generating or...

Haml Cross-Site Scripting Vulnerability

haml is an open source HTML abstract markup language from the Haml HAML team. A cross-site scripting vulnerability exists in haml-coffee, which supports overriding a range of HTML helper functions through its configuration options. Control of the escapeHtml parameter through template configuratio...

Haml cross-site scripting vulnerability (CNVD-2021-47372)

haml is an open source HTML abstract markup language from the Haml HAML team. A cross-site scripting vulnerability exists in haml-coffee, which supports overriding a range of HTML helper functions through its configuration options. Control of the escapeHtml parameter through template configuratio...

PayloadsAllTheThings

It is an offensive tool for general-purpose exploitation. The repository contains a list of supported funding platforms, including GitHub Sponsors, Ko-fi, and Buy Me a Coffee. The primary funding platform is GitHub Sponsors, with the username swisskyrepo. No specific exploits or tools are present...

@27works/posto (=2.0.2), @lluis/codo (>=2.1.2 <=2.1.3) +71 more potentially affected by CVE-2021-32818 via haml-coffee (>=0.5.5 <=1.14.1)

haml-coffee NPM version =0.5.5, =2.1.2, =0.0.2, =2.1.3, =0.0.1, =0.0.1, =0.2.0, =0.2.0, =0.0.1, =0.0.1, =0.0.1, =0.0.8 - codo-theme-yaml =0.1.0 and more Source cves: CVE-2021-32818 Source advisory: OSV:GHSA-M7MF-VM62-7X3Q...

Insecure template handling in haml-coffee

haml-coffee is a JavaScript templating solution. haml-coffee mixes pure template data with engine configuration options through the Express render API. More specifically, haml-coffee supports overriding a series of HTML helper functions through its configuration options. A vulnerable application...