地图 / 0 Click account takeover via timed requests to ███████forgot-password (single-packet attack)

0 Click account takeover via timed requests to ███████forgot-password (single-packet attack)

密码学缺陷 / Use of a Broken or Risky Cryptographic Algorithm / #2142109

厂商: Mars
严重程度: 中危
赏金: —
弱点: Use of a Broken or Risky Cryptographic Algorithm
研究员: @0x999
披露日期: 2024-07-11
资产: *.vcahospitals.com
CVE: —

该报告还没有中文解读。

时间线

2023-09-09报告提交
2024-07-11公开披露

阅读 HackerOne 原文 ↗作者 @0x999 · 版权归作者与 Mars 所有

同类报告

iOS group chat denial of serviceLY Corporation · 2023-03-29 · $300 Invisible Salamanders Attack against end_to_end_encryption in NextcloudNextcloud · 2024-12-03 Weak ssh algorithms and CVE-2023-48795 Discovered on various subdomains of nextcloud.comNextcloud · 2024-05-22 Default Minimum TLS Version Set to TLS v1.0 (Cryptographic Weakness)curl · 2025-07-10 Use of a Broken or Risky Cryptographic Algorithm (CWE-327) in libcurlcurl · 2025-04-29 Insecure SHA1withRSA in b5s.hackerone-ext-content.com and a4l.hackerone-ext-content.comHackerOne · 2017-06-21

0 Click account takeover via timed requests to ███████forgot-password (single-packet attack) · 破甲 POJIA