关键字【300.0】的搜索结果共33记录

公开时间 奖金 作者 标题 厂商 漏洞类型
2018-11-18 $300.0 bobrov [lk.contact-sys.com] SQL Injection reset_password FP_LK_USER_LOGIN QIWI SQL Injection
2018-11-13 $300.0 nuke11 Multiple Bugs in api.data.gov/signup endpoint leads to send custom messages to Anyone TTS Bug Bounty none
2018-11-05 $300.0 mishre Exposing voting results on the Slowvote application without actually voting Phabricator none
2018-10-23 $300.0 qab chrome://brave can still be navigated to, leading to RCE Brave Software Code Injection
2018-10-22 $300.0 metnew RCE: DnDing shortcut files to chrome://brave allows loading HTML files in Muon's context Brave Software none
2018-09-27 $300.0 mr_r0w07 Unsanitized input in email field Vanilla Cross-site Scripting (XSS) - Stored
2018-09-24 $300.0 metnew Navigation to `chrome-extension://` origin (internal pages) from the web Brave Software none
2018-09-21 $300.0 encrypt CSRF in cancel group and private show requests Chaturbate Cross-Site Request Forgery (CSRF)
2018-09-19 $300.0 nahamsec Reflected XSS on ssl-ccstatic.highwebmedia.com via player.swf Chaturbate Cross-site Scripting (XSS) - Reflected
2018-09-19 $300.0 corb3nik [chaturbate.com] - CSRF Vulnerability on image upload Chaturbate none
2018-09-18 $300.0 masatokinugawa Sending arbitrary IPC messages via overriding Function.prototype.apply Brave Software Command Injection - Generic
2018-09-18 $300.0 masatokinugawa Brave Browser unexpectedly allows to send arbitrary IPC messages Brave Software Command Injection - Generic
2018-09-11 $300.0 shivasurya Phishing user to download malicious app could lead to leakage of User Access Token, Email, Name and Profile photo via exported RemoteService Zomato Information Disclosure
2018-08-15 $300.0 plenum Subdomain takeover at segway.shipt.com Shipt none
2018-07-23 $300.0 geekboy Overwrite Drafts of Everyone Vanilla Improper Access Control - Generic