Research, demonstrations, and popcorn
I gave a separate Android app an intent that Glassdoor should have treated as external. It opened Glassdoor’s internal Apply screen, loaded JavaScript I controlled, and ended on Glassdoor’s real “Your application was sent” screen. I had not…
I found a route bypass in Linktree’s Android app. A crafted deep link could open an arbitrary website inside Linktree, give the page a trusted-looking title, and hide the separate domain label. I reproduced the behavior on version…
Recently a “researcher” has gone on a marketing blitz trying to convince the world he found a vulnerability that doesn’t exist. This vulnerability has been dubbed ‘RID Exploitation.’ According to this researcher, the RID is the relative identifier…
The issues around voting are enormous. I couldn’t even pretend to know them all or understand the full impact. Especially without being able to examine the voting machines being utilized for this election. That being said, there are…
Note: I was not going to post on this originally since Facebook refused to fix the issue. I like sharing things I find, but not if it is going to screw over a bunch of people. However, others have…
Note: I left some information out of this post because Buffalo Wild Wings has not closed the security hole. They also did not even bother responding to me when I attempted to contact them MANY times. I explained…
The Russian District of Tambov’s government run website is vulnerable to a PostgreSQL injection. The site is not fixed as I have tried sending several notices to the site owners, but every email I have sent bounced back…
For those that don’t know what CloudFlare is, please review their home page. The basic idea behind CloudFlare is a reverse proxy that allows CloudFlare to protect websites from Denial of Service attacks, cross-site scripting, and a variety…
This vulnerability post originated from my old site and last updated on June 5th, 2013. I have done some slight updates now that I am moving it over to my new site. Let me start this post with a note: I like…
Even though it has been more than 18 months since I reported this issue, the company is working with limited funds and technological constraints that prevent them from resolving this particular issue. In order to prevent theft, they…
