Month: September 2016

Microsoft MSRC RSS ASPX – CS Cross Site Vulnerability

Microsoft EPD – CS Flash Cross Site Web Vulnerability

Facebook Bug Bounty – Canvas & Web URL Filter Bypass

Phone Drive v3.0.3 iOS – Multiple Critical Vulnerabilities

withU Music Share 1.3.7 iOS – Command Inject Vulnerability

Microsoft Yammer SN – oAuth Bypass Token Vulnerability

Microsoft Yammer SN – oAuth Bypass (Session) Vulnerability

FTP OnConnect v1.4.11 iOS – Multiple Web Vulnerabilities

Copy to WebDAV v1.1 iOS – Multiple Web Vulnerabilities

Google – (Pin via Postal Delivery) Information Disclosure