Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...
Continue ReadingDecember 28, 2022
Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...
Continue ReadingDecember 28, 2022
Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...
Continue ReadingDecember 28, 2022
Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...
Continue ReadingDecember 28, 2022
Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...
Continue ReadingDecember 28, 2022
# Description User can view any content from private private memos from other users via api ``` PATCH /api/memo/8 HTTP/1.1 {"id":8,"rowStatus":"ARCHIVED"} ``` # Proof of Concept Login to website in b ...
Continue ReadingDecember 28, 2022
# Description User can archive any private memos, Delete any Shortcut and Edit any Shortcut from other users via api ``` PATCH /api/memo/8 HTTP/1.1 {"id":8,"rowStatus":"ARCHIVED"} ``` ``` PATCH /api/s ...
Continue ReadingDecember 28, 2022
# Description Cross-Site Request Forgery (CSRF) is an attack that forces authenticated users to submit a request to a Web application against which they are currently authenticated. CSRF attacks explo ...
Continue ReadingDecember 28, 2022
Back to Main