HackerOne Bug Bounty Disclosure: b-subdomain-takeover-on-mozaws-net-b-mikey

Company Name: b'Mozilla Core Services' Company HackerOne URL: https://hackerone.com/mozilla_core_services Submitted By:b'mikey96'Link to Submitters Profile:https://hackerone.com/b'mikey96' Report Title:b'Subdomain Takeover on mozaws.net'Report Link:https://hackerone.com/reports/2171494Date...

HackerOne Bug Bounty Disclosure: b-missing-function-level-access-control-in-mozilla-formula-containsregular-expression-denial-of-service-cve-b-unexpectedbuffercon

Company Name: b'Mozilla Core Services' Company HackerOne URL: https://hackerone.com/mozilla_core_services Submitted By:b'unexpectedbuffercon_'Link to Submitters Profile:https://hackerone.com/b'unexpectedbuffercon_' Report Title:b'Missing Function Level Access Control...

Simple Cloudflare Turnstile Plugin for WordPress cross-site scripting | CVE-2023-5135

NAME__________Simple Cloudflare Turnstile Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Simple Cloudflare Turnstile Plugin for WordPress 1.23.2Risk Level:6.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Simple Cloudflare...

AcyMailing SMTP Newsletter Plugin for WordPress cross-site scripting | CVE-2023-41867

NAME__________AcyMailing SMTP Newsletter Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress AcyMailing SMTP Newsletter Plugin for WordPress 8.6.2Risk Level:7.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________AcyMailing SMTP...