Apple iOS Calendar Denial of Service Vulnerability

Apple iOS is an operating system developed for mobile devices. A security vulnerability in Calendar in Apple iOS allows remote attackers to exploit the vulnerability to conduct denial-of-service attacks using special invitations...

HackerOne: Content spoofing on invitations page

When you are an owner of a program on h1 , you are allowed to invite external users to access any report through email . As you invite someone , this is how the body of invitation is being sent through email :- link to researcher's profile invited you to join the bug Title Of The Bug for Name of...

Polycom RealPresence CloudAXIS Suite Cross-Site Scripting Vulnerability

Polycom RealPresence CloudAXIS Suite is a cloud-based, cross-platform video collaboration solution from Polycom. The solution allows meeting schedules to be sent to contacts via email and calendar invitations. A cross-site scripting vulnerability exists in Polycom RealPresence CloudAXIS Suite 1.6...

HackerOne: Team member invitations to sandboxed teams are not invalidated consistently (v2)

As per our email conversation on ticket 2527, I am giving you a proof of concept of my claim. 1. I have a sandboxed team in hackerone,named movielee. 2. The manager of that team @haxorsistz sends an invite to = ██████████ 3. The link which I received on email was =...

HackerOne: Team member invitations to sandboxed teams are not invalidated consistently

hello today i found a Bug about Auth in Send invitation to member to join the team ,, so if Now The Victim Send invition to Another Victim Account to join the team as a Manager,, the link of the invitation is will Be Valid For Many Many Many time to Accept the invtiation from Another Accounts in ...

php云越权发面试邀请扣招聘者积分

简要描述： 版本v3.1 9.23 1.控制邀请面试的参数也就那么几个，自己可以构造，无需登录可使招聘者向求职者发面试邀请。发面试邀请前提,每发一次扣去12积分。购买积分的时候1元=20个积分。 详细说明： 文件位置：https://images.seebug.org/upload/model/ajax.class.php function savaajaxresumeaction $data'uid'=int$POST'uid';//邀请面试人的uid $data'title'='面试邀请';...

WordPress Social Invitations Plugin 'test.php' XSS Vulnerability

WordPress Social Invitations Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WP Social Invitations <=1.4.4.2 - test.php Multiple Parameter Reflected XSS

The wp-social-invitations WordPress plugin was affected by a test.php Multiple Parameter Reflected XSS security vulnerability...

CVE-2014-4597

Cross-site scripting XSS vulnerability in test.php in the WP Social Invitations plugin before 1.4.4.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xhrurl parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in test.php in the WP Social Invitations plugin before 1.4.4.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xhrurl parameter...

CVE-2014-4597

Cross-site scripting XSS vulnerability in test.php in the WP Social Invitations plugin before 1.4.4.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xhrurl parameter...

CVE-2014-4597

Affected software: WordPress WP Social Invitations Plugin. Vulnerable component: test.php parameter handling (xhrurl) in versions before 1.4.4.3. Root cause: cross-site scripting (XSS) vulnerability allowing remote attackers to inject arbitrary script/HTML via the xhrurl parameter. Impact: potent...

WordPress WP Social Invitations Plugin <= 1.4.4.2 - XSS

Because of this vulnerability in test.php, the attackers can inject arbitrary web script or HTML via the "xhrurl" parameter. Solution Update the plugin...

Warning! Invitation for PC Version of 'Grand Theft Auto V' Game infects Computers with Malware

Since all the versions of the popular game ‘Grand Theft’ gone blatant and during the first week of the release of the Grand Theft Auto 4 in 2008, it topped half of millions of dollars, sold 3.6 million copies and generated $310 million in sales i.e., earning about 5 times as much as the blockbust...

Yahoo!: Flickr: Invitations disclosure (resend feature)

Thank you for your submission to the Yahoo Bug Bounty program. We were able to reproduce the issue you reported and have implemented appropriate fixes. We appreciate your adherence to responsible disclosure guidelines and look forward to your future participation in the program...

Ongoing Targeted Attack Campaign Going After Defense, Aerospace Industries

Researchers have identified a strain of malware that’s being used in a string of targeted attacks against defense contractors, government agencies and other organizations by leveraging exploits against zero-day vulnerabilities. The attacks may have been going on since 2009 in some form and the...

2daybiz Network Community Script SQL Injection / XSS Vulnerability

Exploit for php platform in category web applications ================================================================== 2daybiz Network Community Script SQL Injection / XSS Vulnerability ==================================================================...

Moderate: Red Hat Security Advisory: pidgin security update

Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on...

Fake Twitter Invites Spread Worm

From MediaPost Laurie Sullivan A wave of fake Twitter email invitations sent in hopes of luring people to unzip a file to find out who invited them has been hitting unsuspecting victims. The message carries a mass-mailing worm. It looks around on infected computers and sends emails to addresses i...

Yahoo! Messenger webcam stream heap overflow

Overview Yahoo! Messenger fails to properly handle webcam streams, which may allow a remote attacker to execute arbitrary code. Description Yahoo! Messenger is an instant messaging application that is available for Windows, Mac, Unix, web, and mobile systems. Some version of Yahoo! Messenger, suc...