Automattic: Process of changing email address and password does not asks old Password.

This Vulnerability could be destructive if The user uses a shared computer,or if he uses wordpress in a cyber cafe and forgets to logout from wordpress. If any user uses his wordpress account in some other computer and forgets to logout,his accounts remain insecure.I was wondered that wordpress d...

HackerOne: Report title autocompletion

Scenario: 1. Researcher uses a shared computer. 2. Researcher submits a report. 3. Researcher logs out. 4. Another person logs in, on another account. 5. Another person submits a report. 6. When entering a title, the title of the previous report submitted by the researcher is shown in...

ICQ2000A ICQmail temparary internet link vulnearbility

============================================== Vulnerability : ICQ2000A ICQwebmail temparary internet link vulnearbility Name : Gert Fokkema. Email : [email protected] Function : SecurityManager. Organization : ISAAN. http://www.fokkema.8k.com Organization : Noorderpoortcollege...