Month: September 2016

NASA Orion – Bypass, Persistent Issue & Embed Code Exec

Bird Feeder v1.2.3 WP Plugin – CSRF & XSS Vulnerability

iUSB v1.2 iOS – Arbitrary Code Execution Vulnerability

Facebook Bug Bounty #16 (Studio) – Persistent Vulnerability

Morfy CMS v1.05 – Command Execution Vulnerability

Jease CMS v2.11 – Persistent UI Web Vulnerability

Facebook BB #18 – IDOR Issue & Privacy Vulnerability

iTwitter v0.04 WP Plugin – XSS & CSRF Web Vulnerability

Pimcore v3.0 & v2.3.0 CMS – SQL Injection Vulnerability

iWifi for Chat v1.1 iOS – Denial of Service Vulnerability