Lucene search
+L

41 matches found

Hacker One
Hacker One
added 2014/09/27 5:23 p.m.26 views

Sucuri: Usage of HTTP for exporting graph data as images

Whenever a user of waf.sucuri.net exports his reports graph data as a png, an unencrypted request is sent over to export.highcharts.com. This enables a mitm-able attacker to sniff and|or replace exported image. Also, the whole practice of offloading potentially private user data to an unrelated...

6.8AI score
SaveExploits0
Rows per page
Query Builder