6187 matches found
Mail.ru: Information Disclosure - Получаем доступ к работам и к приватным презентациям к курсам
Access to course training materials was possible in Geekbrains due to read access to S3-compatible bucket. Geekbrains belongs to extended Ext. B scope...
CVE-2019-2316
When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9640, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730...
CVE-2019-2316
CVE-2019-2316 concerns Qualcomm Snapdragon components where a local variable is used after it goes out of scope during digest computation in multiple Snapdragon platforms (MDM9640, QCS405, QCS605, SD 4xx/6xx/7xx series, 710/712/730/845/850/855, SDM660/SDX24, etc.). The root cause is a use-after-s...
Mail.ru: [auto.mail.ru] IDOR на редактирование поста любого юзера.
IDOR allowed to edit arbitrary posts in auto.mail.ru auto.mail.ru belongs to Extended scope IDOR на редактирование произвольного поста на сайте auto.mail.ru...
Palo Alto GlobalProtect SSL VPN remote code execution vulnerability-vulnerability warning-the black bar safety net
One, Foreword Palo Alto GlobalProtect SSL VPN is the enterprise commonly used the SSLVPN products, recently disclosed a remote code execution vulnerability. Second, the vulnerability profile Palo Alto GlobalProtect SSL VPN in/sslmgr position exists format string vulnerability there is a remote co...
Radancy: Developper's websites are easily accessibles leading to massive information disclosure
Domain and URL: .devmaximum.com ███████████.acc.devmaximum.com Hello, I've found a couple hundred of devmaximum websites with personal datas. I know this subdomains are out of scope, i've discovered them with devmaximum.maximum.nl's SSL certificate. But in less than 30 minutes of testing i've...
Mail.ru: CSRF Vulnerability at https://aw.my.com/
CSRF vulnerability allowed to change userbar settings in https://aw.my.com/ https://aw.my.com/ belongs to Ext.B scope...
Redis is not authorized to access high-risk vulnerability alerts-a vulnerability alert-the black bar safety net
Recently, Sangfor security team found that open-source databases Redis broke up an unauthorized access vulnerability, the first time for tracking and analysis of early warning. The study found that the use of the vulnerability, the attacker can achieve rally shell for arbitrary code execution...
CVE-2018-19569
GitLab CE/EE, versions 8.8 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an authorization vulnerability that allows access to the web-UI as a user using a Personal Access Token of any scope...
Unauthorized access vulnerability in Weave scope
Weave Scope is an open source project. Weave scope has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...
Intel Turbo Boost Max Technology 3.0 Discontinuation - US
Lenovo Security Advisory: LEN-27841 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0164 Summary Description: A potential security vulnerability in the Intel Turbo Boost Max Technology 3.0 may allow escalation of privilege. Mitigatio...
Mail.ru: Unrestricted File Upload To Xss Stored [ https://ideas.browser.mail.ru/ ]
Stored XSS in https://ideas.browser.mail.ru/ ideas.browser.mail.ru belongs to extended scope...
Mail.ru: SSRF On [ allods.mail.ru ]
SSRF in allods.mail.ru. allods.mail.ru belongs to Ext.B scope...
CVE-2019-5295
Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.125C00E125R2P14T8 have an authorization bypass vulnerability. Due to improper authorization implementation logic, attackers can bypass certain authorization scopes of smart phones by performing specific operations. This...
Django: Jenkins Unauthenticated RCE on https://djangoci.com/
This report discloses an RCE issue on djangoci.com as outlined in https://www.djangoproject.com/weblog/2019/may/15/rce-djangoci/ While technically a valid issue, it is out of scope for bounty, please see https://hackerone.com/django for details on which issues qualify for bounties...
Cynet Free IR Tool Offering Empowers Responders to Know and Act Against Active Attacks
The saying that there are two types of organizations, those that have gotten breached and those who have but just don’t know it yet, has never been more relevant, making sound incident response a required capability in any organization’s security stack. To assist in this critical mission, Cynet i...
HackerOne: View HackerOne challenge scope before challenge begins
Summary: Hi team, I have come across an issue where I am able to view a HackerOne challenge scope before the challenge begins. The issue here being that I can get an understanding of what the in-scope assets are before a challenge starts, allowing myself to start researching and finding bugs to...
Gitlab -- Information Disclosure
Gitlab reports: Information Disclosure with Limited Scope Token...
