kb.wisconsin.edu Cross Site Scripting vulnerability OBB-3960336

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

Continue Reading
Mozilla: Privates Emails of Moz Workers Leaked in Public file

Summary: Hi Team in the policy of mozilla emails and names of workers is private and dont be shared or disclosure anyway ! because of this restriction all workers in moz gived id and worker name ab ...

Continue Reading
mycompany VDP: This test report has been disclosed by 20_root.

This test report has been disclosed by 20_root....Read More ...

Continue Reading
nullsec VDP: Test by HDR

Test by...Read More ...

Continue Reading
CVE-2024-3501 Exposure of Sensitive Information in lunary-ai/lunary

In lunary-ai/lunary versions up to and including 1.2.5, an information disclosure vulnerability exists due to the inclusion of single-use tokens in the responses of GET /v1/users/me and GET /v1/users/ ...

Continue Reading
CVE-2024-4311 Lack of login attempt rate-limiting in zenml-io/zenml

zenml-io/zenml version 0.56.4 is vulnerable to an account takeover due to the lack of rate-limiting in the password change function. An attacker can brute-force the current password in the 'Updat ...

Continue Reading
CVE-2024-3501

In lunary-ai/lunary versions up to and including 1.2.5, an information disclosure vulnerability exists due to the inclusion of single-use tokens in the responses of GET /v1/users/me and GET /v1/users/ ...

Continue Reading
CVE-2024-3501

In lunary-ai/lunary versions up to and including 1.2.5, an information disclosure vulnerability exists due to the inclusion of single-use tokens in the responses of GET /v1/users/me and GET /v1/users/ ...

Continue Reading

Back to Main

Subscribe for the latest news: