Mail.ru: Xss в https://e.mail.ru/

Приветствую , Я нашел xss на https://e.mail.ru/ , похоже, это self-xss, но, возможно,в будущем вы будите планировать расшаривать данную функциональность и это будет не self-xss, в том числе комбинация csrf logout/csrf login может расширить её функционал. Алсо, эта self-xss обходит текущие правила...

Cross site request forgery (csrf)

CSRF in the Clean Login plugin before 1.8 for WordPress allows remote attackers to change the login redirect URL or logout redirect URL...

CVE-2017-8875

CSRF in the Clean Login plugin before 1.8 for WordPress allows remote attackers to change the login redirect URL or logout redirect URL...

shib_auth Moderately Critical - Multiple vulnerabilities - SA-CONTRIB-2017-043

This module enables you to login via Shibboleth. The module doesn't sufficiently logout the user when the shib session expires, which depending on the caching mechanism makes private data public. This vulnerability is mitigated by the fact that shibauth would have to be used in combination with a...

cmdbet.com XSS vulnerability

Vulnerable URL: http://www.cmdbet.com/Main/logout.aspx?code='-confirmOPENBUGBOUNTY-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 446225 VIP website status:| No Coordinated...

Weblate: Invalidate session after password reset - hosted website

Hey team, The Hosted Website doesn't invalidate session after the password is reset. It's one of the OWASP recommendations to terminate the session when a password is changed and force the user to re-login. Quote from OWASP: Renew the Session ID After Any Privilege Level Change The session ID mus...

Weblate: Logout CSRF

Hi Team, This is a low risk but want you to know that logout on this domain demo.weblate.org did not protect the logout form with csrf token, therefor i can logout any user by sending this url https://demo.webplate.org/accounts/logout/. Logout should have post method with a valid csrf token. Let ...

Fedora 24 : php-pear-CAS (2017-d9d620366e)

Changes in version 1.3.5 - Security Fixes : - Fix possible authentication bypass in validateCAS20 228 Gregory Boddin - Bug Fixes : - Fix file permissions non-executable 177 Remi Collet - Fixed translations Greek and Japanese 192 ikari7789 - Fix errors under phpdbg 204 MasonM - Fix logout...

bit.do XSS vulnerability

Open Bug Bounty ID: OBB-225943 Description| Value ---|--- Affected Website:| bit.do Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

accounts.cancer.org XSS vulnerability

Vulnerable URL: https://accounts.cancer.org/logout?redirectURL=https://www.xssposed.org/...

Multiple Jensen of Scandinavia Air:Link 'return-url' parameter open redirect vulnerability

Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. An open redirect vulnerability exists in the handling of the 'return-url' parameter on the /goform/formLogout page of multiple Jensen of Scandinavia Air:Link products. An attacker can construct a maliciou...

UBUNTU-CVE-2017-7358

In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrary directory path locations and escalate privileges to root when the guest user logs out...

Reflected Cross-Site Scripting Vulnerability in YXcmsApp V1.4.3 'logout' Function

Yxcms is an enterprise building system based on PHP and mysql technology. A reflective cross-site scripting vulnerability exists in the YXcmsApp V1.4.3 'logout' function. It allows an attacker to construct an XSS statement to perform a pop-up box operation and obtain information such as user...

Insecure Logout

WildFly Elytron Web is vulnerable to insecure logout. The vulnerability exists because HttpServletRequest.logout does not perform a successful logout if Elytron security is used...

Denial Of Service (DoS)

keycloak-saml-core is vulnerable to denial of service DoS attacks. The vulnerability exists due to the mishandling of a Logout request with an Extensions in the middle of the request...

Open redirect

Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header...

CVE-2017-6549

Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware before...

Nextcloud: No session logout after changing password & alsoandroid sessions not shown in sessions list so they can be deleted

There is no session logout after changing password and also if admin needs to disconnect some session of android no android sessions are shown in list If attacker has password and logins somehow using android app he may not be logged out as there are no session logout after changing password and...

jkonline.in Open Redirect vulnerability

Vulnerable URL: http://www.jkonline.in/Account/Logout?u=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 2867877 VIP website status:| No Check...

dnhonline.in Open Redirect vulnerability

Vulnerable URL: http://www.dnhonline.in/Account/Logout?u=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 8851447 VIP website status:| No Chec...