Unspecified Vulnerability in Zulip Server

Zulip Server is a set of open source group chat application written in Python based on the Django framework . A security vulnerability exists in the implementation of the invitebyadminsonly setting in Zulip Server 1.5.1 and earlier versions. An attacker can exploit the vulnerability to invite oth...

HackerOne: Invitation tokens leak to Google Analytics

Hi, While testing i have noticed that , the hackerone invitation token gets exposed to google-anaytics.com How? Here look at the photo- ████████ We can see that the request payload is exposing the invitation token and its not filtered like this one- ███████ And this is what google does with their...

Open-Xchange: Resend invitation to members by Read only user(Privilege Escalation)

Hi Team, Description : ViewerRead only user of any entityEx: Address book, Folder etc. doesn't have access to permission section. This user can't make any action in permission/Invite people section. But Resending invitation HTTP request is vulnerable and it doesn't check whether the user is Owner...

Invite Anyone <= 1.3.14 - Change of Email Invitation Content

The Invite Anyone WordPress plugin was affected by a Change of Email Invitation Content security vulnerability...

Pushwoosh: Spam Some one using (user.saveInvite) system

Attacker was able to spam users via invites...

CVE-2016-3379

Cross-site scripting XSS vulnerability in Microsoft Exchange Server 2016 Cumulative Update 1 and 2 allows remote attackers to inject arbitrary web script or HTML via a meeting-invitation request, aka "Microsoft Exchange Elevation of Privilege Vulnerability."...

Microsoft Exchange Server Multiple Vulnerabilities (3185883)

This host is missing an important security update according to Microsoft Bulletin MS16-108. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Algolia: Hyperlink Injection in Friend Invitation Emails

Description A user can change their last name to a URL in order to send email invitations containing malicious hyperlinks. Steps to Reproduce 1. Create a new Algolia account with the last name http://example.com. 2. Navigate to My Account Referrral 3. Send an invitation to an email address that y...

Instacart: Hyperlink Injection in Friend Invitation Emails

Description A user can change their name to a URL in order to send email invitations containing malicious hyperlinks. Steps to Reproduce 1. Create a new Instacart account with the first name http://example.com 2. Navigate to https://www.instacart.com/store/referrals 3. Send an email invitation to...

CVE-2016-4605

Calendar in Apple iOS before 9.3.3 allows remote attackers to cause a denial of service NULL pointer dereference and device restart via a crafted invitation...

CVE-2016-4605

Calendar in Apple iOS before 9.3.3 allows remote attackers to cause a denial of service NULL pointer dereference and device restart via a crafted invitation...

CVE-2016-4605

Apple iOS 9.3.3 fixes a Calendar denial-of-service flaw (CVE-2016-4605) caused by a NULL pointer dereference when processing a crafted calendar invitation. Affected: iOS 9.3.x devices (Calendar component). Root cause: memory handling issue leading to device restart. Remediation: install iOS 9.3.3...

Keybase: Register multiple users using one invitation (race condition)

Hi, It is possible to create multiple accounts using a single invitationid due to a race condition bug in //api/1.0/signup.json. I have successfully created 8 accounts using invitation with id = 37c5a121adf23e90b875500d The account usernames: novijosiptest1,2,4,5,6,8,9,10 you can delete them, I...

HackerOne: Email Address Leak

Hello, I have found out that when a team invites a team member via username, the email address of the invited user is being disclosed after he accepted it. This can be abused since we all know that the email address is not publicly visible through hackerone profile. One team can abuse its functio...

HackerOne: Race Conditions Exist When Accepting Invitations

Hi All, Further to my last two comments on report 118312 and realizing that tokens are being stored in the DB, I realized there is probably a race condition vulnerability which allows invitation tokens to be consumed at least twice depending on the server/database response time. I tested it tonig...

HackerOne: Null byte injection

Hi , I would like to report an issue that I have noticed in https://hackerone.com/users/signin?invitationtoken= . I am not sure if this is a valid security issue , but I have decided to report it anyway and see what you guys think. Details: - When you go to...

Keybase: Race conditions can be used to bypass invitation limit

Hi, I have received 3 invites from Chris I might have screwed up the PGP email, but thanks anyway, added to my account https://keybase.io/josipfranjkovic. Using race conditions, I was able to send out a total of 7 invites to my throwaway emails, obviously bypassing the 3 invitations limit. Here a...

CVE-2015-7377

Cross-site scripting XSS vulnerability in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the invitaioncode parameter in a pie-register page to the default URI...

用友某管理系统SQL注入

简要描述： 求个邀请码 来学习 详细说明： http://radm.chanjet.com http://125.35.5.144:81/fixsys/Default.aspx admin' or '1'='1 漏洞证明： admin' or '1'='1...

HackerOne: Invitation is not properly cancelled while inviting to bug reports.

This issue is a little confusing. So, if you are not able to reproduce let me know i will send you a video to help reproduce the issue. Reproduction Steps : 1 Let's say you are User A who is inviting a user B to abug report, User A goes to + signadding participants and adds a email address there....