1242 matches found
Password of talk conversations can be bruteforced
None...
Improper restriction of excessive authentication attempts on WebDAV endpoint
None...
Exploit for Out-of-bounds Write in Haxx Libcurl
Quick description This showcases the cURL CVE-2023-38545. It...
HackerOne: Organization members can delete reports in teams they have no access to
Reports in teams could be deleted by organization members without access to those teams. The vulnerability allowed deletion of analytics reports for restricted teams through a GraphQL mutation even when members lacked permissions to view or edit those reports...
Kibana Prototype Pollution / Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Kibana Upgrade Assistant Telemetry Collector Prototype Pollution', 'Description' = %q Kibana before version 7.6.3 suffers from a prototype...
HackerOne: Google Docs link in JS files allows editing & reading survey information
A Google Docs link was discovered in JavaScript files on a website allowing editing and reading of survey information. The link provided access to edit a survey and view some users' emails and responses...
Hackerone: CVE-2023-38039 HTTP headers eat all memory
...
HackerOne: Ability to bulk submit reports via query named based batching
A vulnerability was discovered in the GraphQL API of the HackerOne platform. The vulnerability allowed an attacker to bulk submit reports via query-based batching, bypassing the intended limit of 500 reports. This was achieved by leveraging a Python script to generate a large number of reports in...
HackerOne: IDOR: Authorization Bypass in LockReport Mutation for public reports
An authorization bypass vulnerability allowed an attacker to lock any public report, potentially disrupting the reporting process...
HackerOne: Hackers two email disclosed on submission at hackerone hactivity
Sensitive information, including the email addresses of two hackers/reporters, was inadvertently disclosed in a video proof-of-concept POC on a HackerOne submission...
HackerOne: IDOR - Delete all Licenses and certifications from users account using CreateOrUpdateHackerCertification GraphQL query
All licenses and certifications in HackerOne could be deleted by changing the ID number in the CreateOrUpdateHackerCertification GraphQL query...
HackerOne: Support Tickets can be created on behalf of other users using spoofed email | Bypass of #2001913
A vulnerability allowed an attacker to create support tickets on behalf of other users by sending a fake email to [email protected]. This bypassed a previous fix implemented by HackerOne to prevent support tickets from being created via email...
HackerOne: Bypass of #2035332 RXSS at image.hackerone.live via the `url` parameter
A reflected cross-site scripting RXSS vulnerability was discovered on the image.hackerone.live website. The vulnerability allowed an attacker to bypass the fix implemented for a previous RXSS issue. By modifying the server's response to a HEAD request, the attacker could change the Content-Type a...
Missing password confirmation when creating app passwords
None...
Existance of calendars and addressbooks can be checked by unauthenticated users
None...
Users can delete external storage mount points
None...
Notes attachment render HTML in preview mode
None...
user_oidc app stores client secret unencrypted in database
None...