CVE-2024-31992 Mealie contains a DoS vulnerability in recipe importer

Mealie is a self hosted recipe manager and meal planner. Prior to 1.4.0, the safescrapehtml function utilizes a user-controlled URL to issue a request to a remote server, however these requests are not rate-limited. While there are efforts to prevent DDoS by implementing a timeout on requests, it...

darwinmealprep.com.au Cross Site Scripting vulnerability OBB-2830457

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Scammers Pose as Meal-Kit Services to Steal Customer Data

Attackers are piggybacking off the booming market for meal-kit delivery services since the pandemic, and sending SMS phishing messages doctored up to look like they’re legitimate correspondence from popular brand names — including HelloFresh and Gousto. This is just another example of why the wor...

SQL Injection Vulnerability in Caiyitong Meal Management Software of Guangzhou Timothy Information Technology Co.

Guangzhou Timothy Information Technology Limited Liability Company was founded on October 09, 2016 and its scope of business includes software development, information system integration services, computer technology development and technical services. A SQL injection vulnerability exists in...

Executive hacked competitor’s website to steal students meal preferences

By Ryan De Souza Top Executive at Bay Area School Lunch Provider Arrested for Hacking into Competitor’s Website to Access Students Meal Preferences. Personal rivalry and competitiveness can compel people to get involved in all sorts of bizarre activities and the latest incident is clear proof of...

U.S. Dept Of Defense: IDOR

Summary: IDOR Description: By changing the value in the parameter █████████= from my own account █████ to something else such as ████████ it is possible to see barcode and expiration date of other ████ without their consent. Impact Information Disclosure Step-by-step Reproduction Instructions 1...

Zomato: [www.zomato.com] Getting a complimentary dessert [Zomato Treats] on ordering a Meal at no cost

Go to order food tab and select any restaurant that delivers online. 2. Add Zomato Treat Subscription to cart. 3. Add more items to cart to fulfil the minimum order requirement for that restaurant. 4. Click on Continue and proceed to pay online. 5. While paying online I faced the issue that...

Meal Chain App Has Multiple Vulnerabilities

Meal Chain APP is an ingredient sourcing platform focusing on the restaurant industry. There are arbitrary user registration and arbitrary password reset vulnerabilities in Meal Chain APP. An attacker can register any account and reset any password by capturing the verification code...

spareyourpowercharger.com XSS vulnerability

Open Bug Bounty ID: OBB-459811 Description| Value ---|--- Affected Website:| spareyourpowercharger.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventi...

Friday Squid Blogging: Baby Ichthyosaurus Fed on Squid

New discovery: paper and article. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Kur'an-ı Kerim Meal Dinle - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Kur'an-ı Kerim Meal Dinle published at the 'play' market has multiple vulnerabilities...

Joomla Canteen Local File Inclusion

Name : Joomla comcanteen LFI Vulnerability Date : july 9,2010 vendor URL :http://miniwork.eu/ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger greetz to :www.topsecure.net ,All ICW members and my friends : luv y0 guyz...

Joomla Components com_canteen LFI Vulnerability

Exploit for php platform in category web applications =============================================== Joomla Components comcanteen LFI Vulnerability =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

CVE-2006-6269

Multiple SQL injection vulnerabilities in Infinitytechs Restaurants CM allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in rating.asp, 2 the mealid parameter in mealrest.asp, and 3 the resid parameter in resdetails.asp...