浏览报告
203 份报告 · 本页赏金 $51,816 · 2024 年 · 仅含 CVE · 清除筛选
curl: stack-buffer overread during punycode conversions内存破坏Internet Bug Bounty低危—2024-09-22libcurl: freeing stack buffer during x509 certificate parsing内存破坏Internet Bug Bounty低危—2024-08-23important: Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows (CVE-2024-40898)其他弱点Internet Bug Bounty中危$4,2632024-08-27CVE-2024-6874: macidn punycode buffer overread内存破坏curl低危—2024-07-24CVE-2024-3416: MTU of 4096 or greater without fragmentation may cause NGINX worker processes to leak previously freed memory信息泄露Internet Bug Bounty低危$2,6002024-07-12X-E2EE-SIGNATURE verification can be bypassed, leading to loss of confidentiality of end-to-end encrypted files密码学缺陷Nextcloud低危—2024-12-15CVE-2024-38875: Denial-Of-Service through uncontrolled resource consumption caused by poor time complexity of strip_punctuation .拒绝服务Internet Bug Bounty低危$2,1422024-08-23fs.fchown/fchmod bypasses permission model不安全的直接对象引用Internet Bug Bounty低危$2492024-10-16CVE-2024-34750 Apache Tomcat DoS vulnerability in HTTP/2 connector拒绝服务Internet Bug Bounty中危$4,9202024-07-05important: Apache HTTP Server on WIndows UNC SSRF (CVE-2024-38472)服务端请求伪造Internet Bug Bounty中危$4,9202024-07-13moderate: Apache HTTP Server proxy encoding problem (CVE-2024-38473)其他弱点Internet Bug Bounty低危$2,6002024-07-13important: Apache HTTP Server weakness with encoded question marks in backreferences (CVE-2024-38474)其他弱点Internet Bug Bounty中危$4,9202024-07-13important: Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. (CVE-2024-38475)其他弱点Internet Bug Bounty中危$4,9202024-07-13important: Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect (CVE-2024-38476)代码执行Internet Bug Bounty中危$4,9202024-07-13important: Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request (CVE-2024-38477)内存破坏Internet Bug Bounty中危$4,9202024-07-13moderate: Apache HTTP Server: mod_rewrite proxy handler substitution (CVE-2024-39573) CWE-20 Improper Input Validation其他弱点Internet Bug Bounty低危$2,6002024-08-12moderate: Apache HTTP Server: HTTP response splitting (CVE-2023-38709)注入与走私Internet Bug Bounty低危$2,6002024-07-13ReDoS Vulnerability in HTTP Accept Headers Parsing拒绝服务Internet Bug Bounty低危$2,6422024-10-30NoSQL injection leaks visitor token and livechat messages信息泄露Rocket.Chat低危—2024-07-11SAML Signature verification bypass allows logging into any user (with specific conditions)访问控制GitHub高危—2024-10-10CVE-2024-6197: freeing stack buffer in utf8asn1str内存破坏curl低危—2024-07-24External storage - global credentials returned to the client side in plaintext信息泄露Nextcloud低危—2024-11-21Incorrect Encoding Conversion in hostname results in indeterminate SSRF vulnerabilities内存破坏curl低危—2024-06-18The initial E2EE password generated by Rocket.Chat mobile can be recovered in a practical timescale.密码学缺陷Rocket.Chat中危—2024-10-01[CVE-2024-32464] ActionText ContentAttachment’s can Contain Unsanitized HTML跨站脚本Internet Bug Bounty低危$2,6002024-06-30