Mail.ru: Code source discloure & ability to get database information "SQL injection" in [townwars.mail.ru]

SQL injection and PHP source code disclosure in out-of-scope project...

Mail.ru: [tidaltrek.mail.ru] SQL Injection

SQL injection with local file read in out-of-scope service...

AWS releases PCI DSS Quick Start for Deploying PCI DSS In-Scope Workloads

In the next step to help customers adopt their platform for PCI, Amazon Web Services AWS has released their PCI DSS Quick Start program. The PCI DSS Quick Start program is the next evolution of cloud providers developing tools for rapid deployment of standardized configurations to drive adoption ...

chromium-browser: same origin bypass in dom

The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent script execution during node-adoption operations, which allows remote attackers to bypass the Same Origin Policy via a...

LocalTapiola: Source Code Disclosure on out of scope domain viestinta.lahitapiola.fi

Issue The reporter had found an open .git folder on one of our out of scope domains. Fix The issue was investigated and found to be valid. The source code was removed from the public server. The source code did not contain any business critical information and customer information was never at...

oschina.net XSS vulnerability

Vulnerable URL: http://www.oschina.net/search?scope=project'...

Uber: Requested and received edit access to Google form

Per the policies laid out in www.hackerone.com/uber social engineering attempts are explicitly out of scope: Social engineering attempts this includes phishing attacks against Uber employees Failure to follow these policies will result in forfeiture of any bounty and a potential ban from the...

Solar System Scope - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Solar System Scope published at the 'play' market has multiple vulnerabilities...

CVE-2016-1573

Versions of Unity8 before 8.11+16.04.20160122-0ubuntu1 file plugins/Dash/CardCreator.js will execute any code found in place of a fallback image supplied by a scope...

New Relic: Stored XSS through Angular Expression Sandbox Escape

As an Admin of an account, I am able to set the Name of the Account to an Angular expression. This Angular expressions is resolved and executed on the Insights Welcome Page for anyone that is apart of the Account. Due to the ability to invite anyone even current NewRelic users to an Account, it...

Mail.ru: bgplay.mail.ru

Potential RCE via Java object deserialization in out-of-scope service...

Mapbox: Mapbox API Access Token with No Scope Can Read Styles

HI I created one api token with 0 scope. Then I sent the following request to server GET /styles/v1/katilthe?accesstoken=pk.eyJ1Ijoia2F0aWx0aGUiLCJhIjoiY2lsbWJwcWpjNjhmNnZubWNhYXdwZm5obyJ9.2cPnaIiXcFnDRFMfrD1TRw HTTP/1.1 Host: api.mapbox.com User-Agent: Mozilla/5.0 Windows NT 6.3; WOW64; rv:44.0...

Mail.ru: SSRF/XSPA [parapa.mail.ru] 2

Blind SSRF in parapa.mail.ru on the moment of reporting, Ext.B scope was not covered by bug bounty program, the bounty was awarded as a bonus...

Mail.ru: Утечка информации через JSONP (XXSI)

Information disclosure for logged-in user in out-of-scope service...

SAP Hostcontrol remote DOS

Application: SAP NetWeaver AS Java Versions Affected: SAP NetWeaver AS Java 7.0 – 7.5 Vendor URL: SAP Bug: DoS Reported: 01.11.2016 Vendor response: 02.11.2016 Date of Public Advisory: 13.06.2017 Reference: SAP Security Note 2389181 Authors: Mathieu Geli ERPScan VULNERABILITY INFORMATION Class: D...

HackerOne: User with Read-Only permissions can request/approve public disclosure

Hi, I found out that a user who belongs to a group with Read-Only permission can still request and approuve public disclosure when the report is closed by privileged admin although that these permissions are only allowed if the user group has Report scope. Consequently, the team member with limit...

DEBIAN-CVE-2015-8739

The ipmifmtudpport function in epan/dissectors/packet-ipmi.c in the IPMI dissector in Wireshark 2.0.x before 2.0.1 improperly attempts to access a packet scope, which allows remote attackers to cause a denial of service assertion failure and application exit via a crafted packet...

UBUNTU-CVE-2015-8739

The ipmifmtudpport function in epan/dissectors/packet-ipmi.c in the IPMI dissector in Wireshark 2.0.x before 2.0.1 improperly attempts to access a packet scope, which allows remote attackers to cause a denial of service assertion failure and application exit via a crafted packet...

ipv6-multicast-mld-list NSE Script

Uses Multicast Listener Discovery to list the multicast addresses subscribed to by IPv6 multicast listeners on the link-local scope. Addresses in the IANA IPv6 Multicast Address Space Registry have their descriptions listed. Script Arguments ipv6-multicast-mld-list.timeout timeout to wait for...

Mail.ru: [babel.mail.ru] Admin Page Found

Access to babel.mail.ru admin page was not sufficiently filtered, allowing accounts bruteforcing. bable.mail.ru is not directly listed in the bug bounty scope, but this vulnerability could affect projects in the scope...