Page MenuHomeVulnz
Feed All Stories

Jun 5 2018

avm99963 triaged T7: Remote code execution and full access to database and codebase at offerplaying.com as Priority-0 priority.
Jun 5 2018, 12:56 PM · Unknown Object (Project)
avm99963 changed the visibility for F24: 172.zip.
Jun 5 2018, 12:53 PM

May 2 2018

avm99963 closed T6: Some users continue to receive email updates of some threads of a Google group after being removed from a group as Verified.
May 2 2018, 12:02 AM · Unknown Object (Project)

Apr 28 2018

avm99963 changed the visibility for T1: Students can see other student's personal information at accesuniversitat.gencat.cat.
Apr 28 2018, 2:25 PM · Unknown Object (Project)
avm99963 closed T1: Students can see other student's personal information at accesuniversitat.gencat.cat as Verified.

Yesterday at 14:26 someone from CESICAT called me in order to confirm that the issue was solved, as I had noticed the day before, when I updated this report.

Apr 28 2018, 2:25 PM · Unknown Object (Project)

Apr 26 2018

avm99963 added a comment to T1: Students can see other student's personal information at accesuniversitat.gencat.cat.

CESICAT hasn't replied yet to the message I sent them yesterday, but I have just seen that they the reproduction steps are no longer functional, so they must have fixed it or are actively working on fixing it.

Apr 26 2018, 6:46 PM · Unknown Object (Project)

Apr 25 2018

avm99963 created Vulnerability Reports Lifecycle.
Apr 25 2018, 11:25 PM · Unknown Object (Project)
avm99963 created Wiki.
Apr 25 2018, 11:25 PM
avm99963 updated the task description for T1: Students can see other student's personal information at accesuniversitat.gencat.cat.
Apr 25 2018, 10:16 PM · Unknown Object (Project)
avm99963 changed Reported from Apr 25 2018, 12:00 AM to Apr 25 2018, 5:52 PM on T1: Students can see other student's personal information at accesuniversitat.gencat.cat.
Apr 25 2018, 9:33 PM · Unknown Object (Project)
avm99963 changed the status of T1: Students can see other student's personal information at accesuniversitat.gencat.cat from New to Accepted.
Apr 25 2018, 9:14 PM · Unknown Object (Project)