1900 matches found
oefi.org Improper Access Control vulnerability OBB-1345711
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-0360
In Notification Access Confirmation, there is a possible permissions bypass due to uninformed consent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145129456...
Design/Logic Flaw
In Notification Access Confirmation, there is a possible permissions bypass due to uninformed consent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145129456...
CVE-2020-0360
CVE-2020-0360 affects Android 11, involving a permissions bypass in Notification Access Confirmation that could enable local elevation of privilege with user execution privileges needed. Exploitation requires user interaction. The issue is listed under Android 11 vulnerability details and is addr...
ccsn.sn Cross Site Scripting vulnerability OBB-1326846
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
pizzamarket.com Improper Access Control vulnerability OBB-1320052
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
zzxd580.com Cross Site Scripting vulnerability OBB-1319576
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
moto-marketing.ch.kumano3.iway.ch Cross Site Scripting vulnerability OBB-1278682
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-11984
creationtimestamp| type| source ---|---|--- 2020-08-07 20:55:22+00:00| seen| https://t.me/cibsecurity/13977 2020-08-25 07:24:53+00:00| seen| https://t.me/cKure/1973 2020-08-25 08:58:52+00:00| seen| https://t.me/thehackernews/816 2020-08-26 05:45:23+00:00| seen|...
webdirections.co.uk Improper Access Control vulnerability OBB-1242892
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
magicboyhk.com Cross Site Scripting vulnerability OBB-1229558
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
laptopgiatotnhat.vn Cross Site Scripting vulnerability OBB-1228756
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Bitcoin wxBitcoin/bitcoind Buffer Overflow Vulnerability
A vulnerability exists in Bitcoin wxBitcoin and bitcoind versions prior to 0.3.13, which stems from bitcoins that do not properly process the associated bitcoin transaction with a zero-point confirmation. A remote attacker could exploit the vulnerability to cause a denial of service a large numbe...
vupia.nl Cross Site Scripting vulnerability OBB-1224746
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
jotterhub.com Improper Access Control vulnerability OBB-1224735
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Release Information for Veeam Management Pack for Microsoft System Center 9
This version has been superseded by Veeam Management Pack for Microsoft System Center version 9a. Requirements Please confirm that you are running version 8.0 build 8.0.0.2218 or later prior to upgrading. You can check this in the Operations Manager console under Administration, Management Packs...
InnoGames: Stored XSS on recruit.innogames.de
Summary: When applying for a Supporter/Moderator job at recruit.innogames.de the drop-down field "Position" is vulnerable to a stored XSS as the content is not validated. Description: Steps To Reproduce: 1. Visit https://recruit.innogames.de/staemme/de/index/page/show/apply 2. Fill out all requir...
Automattic: No Email Checking at Invitation Confirmation Link leads to Account Takeover without User Interaction at CrowdSignal
Summary: Hi team, When you have a team account, you can invite users to your team from https://app.crowdsignal.com/users/list-users.php If you invite a user, you will see this : F893386 As you can see, there is confirmation link and we can see it from our dashboard. And if you invite existing ema...
thenewdawnliberia.com Improper Access Control vulnerability OBB-1214951
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Shopify: Email Confirmation Bypass in your-store.myshopify.com which leads to privilege escalation
Hello Shopify, I have found a bug by which I can verify any email on .myshopify.com, the bug is very strange but it works. Also I can take over the accounts but only the ones which do not have SSO. To reproduce please follow the steps exactly as I written otherwise you will not be able to reprodu...