Lucene search
+L

1900 matches found

Openbugbounty
Openbugbounty
added 2020/09/18 6:44 a.m.11 views

oefi.org Improper Access Control vulnerability OBB-1345711

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.1AI score
SaveExploits0
NVD
NVD
added 2020/09/17 9:15 p.m.26 views

CVE-2020-0360

In Notification Access Confirmation, there is a possible permissions bypass due to uninformed consent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145129456...

7.8CVSS0.00439EPSS
SaveExploits0References1
Prion
Prion
added 2020/09/17 9:15 p.m.20 views

Design/Logic Flaw

In Notification Access Confirmation, there is a possible permissions bypass due to uninformed consent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145129456...

6.8CVSS8.1AI score0.00439EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/09/17 8:53 p.m.59 views

CVE-2020-0360

CVE-2020-0360 affects Android 11, involving a permissions bypass in Notification Access Confirmation that could enable local elevation of privilege with user execution privileges needed. Exploitation requires user interaction. The issue is listed under Android 11 vulnerability details and is addr...

7.8CVSS8.2AI score0.00439EPSS
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2020/09/11 5:34 p.m.15 views

ccsn.sn Cross Site Scripting vulnerability OBB-1326846

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/09/10 8:13 a.m.16 views

pizzamarket.com Improper Access Control vulnerability OBB-1320052

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.6AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/09/10 5:31 a.m.12 views

zzxd580.com Cross Site Scripting vulnerability OBB-1319576

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/08/27 6:04 a.m.12 views

moto-marketing.ch.kumano3.iway.ch Cross Site Scripting vulnerability OBB-1278682

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.8AI score
SaveExploits0
Circl
Circl
added 2020/08/07 8:55 p.m.14 views

CVE-2020-11984

creationtimestamp| type| source ---|---|--- 2020-08-07 20:55:22+00:00| seen| https://t.me/cibsecurity/13977 2020-08-25 07:24:53+00:00| seen| https://t.me/cKure/1973 2020-08-25 08:58:52+00:00| seen| https://t.me/thehackernews/816 2020-08-26 05:45:23+00:00| seen|...

9.8CVSS6.8AI score0.90039EPSS
SaveExploits2References10
Openbugbounty
Openbugbounty
added 2020/07/30 12:08 p.m.10 views

webdirections.co.uk Improper Access Control vulnerability OBB-1242892

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.9AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/07/18 7:48 a.m.8 views

magicboyhk.com Cross Site Scripting vulnerability OBB-1229558

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/07/17 1:30 p.m.10 views

laptopgiatotnhat.vn Cross Site Scripting vulnerability OBB-1228756

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.7AI score
SaveExploits0
CNVD
CNVD
added 2020/07/15 12:00 a.m.11 views

Bitcoin wxBitcoin/bitcoind Buffer Overflow Vulnerability

A vulnerability exists in Bitcoin wxBitcoin and bitcoind versions prior to 0.3.13, which stems from bitcoins that do not properly process the associated bitcoin transaction with a zero-point confirmation. A remote attacker could exploit the vulnerability to cause a denial of service a large numbe...

6.8AI score
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2020/07/13 5:00 p.m.15 views

vupia.nl Cross Site Scripting vulnerability OBB-1224746

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/07/13 4:58 p.m.16 views

jotterhub.com Improper Access Control vulnerability OBB-1224735

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.8AI score
SaveExploits0
Veeam
Veeam
added 2020/07/13 12:00 a.m.22 views

Release Information for Veeam Management Pack for Microsoft System Center 9

This version has been superseded by Veeam Management Pack for Microsoft System Center version 9a. Requirements Please confirm that you are running version 8.0 build 8.0.0.2218 or later prior to upgrading. You can check this in the Operations Manager console under Administration, Management Packs...

6.4AI score
SaveExploits0Affected Software1
Hacker One
Hacker One
added 2020/07/06 7:27 p.m.65 views

InnoGames: Stored XSS on recruit.innogames.de

Summary: When applying for a Supporter/Moderator job at recruit.innogames.de the drop-down field "Position" is vulnerable to a stored XSS as the content is not validated. Description: Steps To Reproduce: 1. Visit https://recruit.innogames.de/staemme/de/index/page/show/apply 2. Fill out all requir...

0.5AI score
SaveExploits0
Hacker One
Hacker One
added 2020/07/04 1:36 a.m.24 views

Automattic: No Email Checking at Invitation Confirmation Link leads to Account Takeover without User Interaction at CrowdSignal

Summary: Hi team, When you have a team account, you can invite users to your team from https://app.crowdsignal.com/users/list-users.php If you invite a user, you will see this : F893386 As you can see, there is confirmation link and we can see it from our dashboard. And if you invite existing ema...

0.8AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/07/03 3:57 p.m.7 views

thenewdawnliberia.com Improper Access Control vulnerability OBB-1214951

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.9AI score
SaveExploits0
Hacker One
Hacker One
added 2020/06/28 1:09 p.m.113 views

Shopify: Email Confirmation Bypass in your-store.myshopify.com which leads to privilege escalation

Hello Shopify, I have found a bug by which I can verify any email on .myshopify.com, the bug is very strange but it works. Also I can take over the accounts but only the ones which do not have SSO. To reproduce please follow the steps exactly as I written otherwise you will not be able to reprodu...

7AI score
SaveExploits0
Rows per page
Query Builder