Microsoft Edge Scripting Engine Information Disclosure Vulnerability(CVE-2017-8659)

There is an issue in Chakra JIT server that can be potentially exploited to compromise the JIT process from a compromised browser content process. Bugs like this could potentially be used to bypass ACG Arbitrary Code Guard in Microsoft Edge. The issue has been confirmed on a ChakraCore build from...

glenatlivres.com XSS vulnerability

Vulnerable URL: http://www.glenatlivres.com/inscription/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 02.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1566802 VIP website status:| No Check glenatlivres.com...

Coinbase: Device confirmation Flaw

Devices being auto-confirmed in an unexpected way looked like a security bug but was intended functionality...

Login Restriction Bypass

Moodle is vulnerable to login restrition bypasses. A malicious user with a suspended account is still able to login by confirming their email if they have yet to confirm it...

manicdepressionrecords.com XSS vulnerability

Vulnerable URL: http://www.manicdepressionrecords.com/catalog.php?lg=fr%22%27--!%3E%3Cscript%3EalertOPENBUGBOUNTY%3C/script/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 47376...

WakaTime: No rate limiting for confirmation email, can spam anyone with confirmation emails

Hello, there is no rate limiting implemented in sending the confirmation email. Thus, attacker can use this vulnerability to bomb out the email inbox of the victim. Proof of Concept : 1. Register a account in wakatime.com 2. Login to account and go to https://wakatime.com/settings/account 3. Unde...

poppler -- multiple denial of service issues

Poppler developers report: Poppler is prone to a stack-based buffer-overflow vulnerability. Successful exploits may allow attackers to crash the affected application, resulting in denial-of-service condition. Due to the nature of this issue, arbitrary code execution may be possible but this has n...

orsoft.net XSS vulnerability

Vulnerable URL: http://www.orsoft.net/confirmation Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7184520 VIP website status:| No Check orsoft.net SSL connection:| Grade: B...

Nextcloud: IDOR unsubscribe Anyone from NextClouds Newsletters by knowing their Email

Hi Team, I Was Looking around your website and then I found a subdomain newsletter.nextcloud.com on the main page it shows us 3 Options i choose 1st that was Subscribe to our newsletter , Then I click on this Option and I was Taken to https://newsletter.nextcloud.com/?p=subscribe&id=1 The page...

Shopify: Ability to verify any email address you don't own - accounts.shopify.com

Summary: During testing it's been found that in accounts.shopify.com it's possible to change your email address to any email address that you don't own and confirm that email due to the confirmation token being leaked. Steps to reproduce: 1. Login to https://accounts.shopify.com/account 2. Click...

Weblate: Login CSRF : Login Authentication Flaw

Hi Team, Domain: demo.weblate.org In this bug, i have found a way to login any person to the attackers account, therefor when any user login to attackers account, the attacker can see the victims activity inside attackers account such as sensitive information. The issue relies on registration...

naturespath.appbuilder.spredfast.com XSS vulnerability

Vulnerable URL: http://naturespath.appbuilder.spredfast.com/fbcontests/showentry/Gardens-For-Good-1/142107/%22'--!%3E%3CImage%0CSrcset%3DK%0COnerror%3Dconfirm%60OPENBUGBOUNTY%60%0C Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.09.2017 Vulnerability type:| XSS...

pittsburghpa.gov XSS vulnerability

Vulnerable URL: http://www.pittsburghpa.gov/controller/PAFR2015/bookContent.swf?currentHTMLURL=data:text/html;base64,PHNjcmlwdD5hbGVydCgnT1BFTiBCVUdCT1VOVFknKTwvc2NyaXB0Pg== Details: Description| Value ---|--- Patched:| Yes, at 01.06.2017 Latest check for patch:| 01.06.2017 14:29 GMT Vulnerabilit...

denashomes.ca XSS vulnerability

Vulnerable URL: http://www.denashomes.ca/listingresults.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check denashomes.ca SSL...

Insecure Login Defaults

github.com/go-authboss/authboss is vulnerable to insecure login. The library successfully logs in when a confirmation link is clicked. This means a malicious user can log in if they obtain a confirmation or password reset link...

WordPress: Lack of Password Confirmation when Changing Password and Email

Hello Team, I noticed that it is not necessary to put your Password when Changing Emails, Password, etc.. which is easy to an attacker to Change it's Victim's Credentials when he hijack or takeover an account on wordpress forum account. Let me know if you need more information. Best Regards,...

Meh : CSRF in Facebook Delegated Account Recovery

Note this is going to be a quick post. This year, at Enigma 2017 Conference, Facebook introduced a way to move Account Recovery beyond Email and the "Secret" Question. After the presentation the moved operationally and presented the first integration partner : Github. These days I have seen a lot...

Threat Outbreak Alert RuleID28627: Email Messages Distributing Malicious Software on April 5, 2017

Medium Alert ID: 53346 First Published: 2017 April 5 18:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28627 may contain the following files: Name | Siz...

Airwatch 6.1.x / 6.4.x LDAP Injection

https://www.osisecurity.com.au/airwatch-self-service-portal-username-parameter-ldap-injection.html Date: 04-Apr-2017 Product: AirWatch Self Service MDM Versions affected: v6.1.x v6.4.x Vulnerability: LDAP injection Example: https://target/DeviceManagement/ URL accepts the following POST parameter...

it.monova.org XSS vulnerability

Vulnerable URL: https://it.monova.org/search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline:...