BomboBombone.exe Published research posts
ADDRESS TYPE STRING XREF
0000000000800000 ASCII "CVE-2026-73309: Empty OAuth2 credentials bypass" XREF → Open post: CVE-2026-73309: Empty OAuth2 credentials bypass
0000000000801000 ASCII "CVE-2026-73310: OAuth2 redirect URI mismatch" XREF → Open post: CVE-2026-73310: OAuth2 redirect URI mismatch
0000000000802000 ASCII "CVE-2026-73311: OAuth2 authorization code replay" XREF → Open post: CVE-2026-73311: OAuth2 authorization code replay
0000000000803000 ASCII "CVE-2026-73312: Refresh token replay after access-token expiry" XREF → Open post: CVE-2026-73312: Refresh token replay after access-token expiry
0000000000804000 ASCII "CVE-2026-73313: Passkey accepted for the wrong account" XREF → Open post: CVE-2026-73313: Passkey accepted for the wrong account
0000000000805000 ASCII "CVE-2026-73314: PayPal signature check bypass" XREF → Open post: CVE-2026-73314: PayPal signature check bypass
0000000000806000 ASCII "CVE-2026-73315: PayPal certificate URL SSRF" XREF → Open post: CVE-2026-73315: PayPal certificate URL SSRF
0000000000807000 ASCII "CVE-2026-73316: PayPal webhook replay" XREF → Open post: CVE-2026-73316: PayPal webhook replay
0000000000808000 ASCII "CVE-2026-73317: ACP rebuild authorization bypass" XREF → Open post: CVE-2026-73317: ACP rebuild authorization bypass
0000000000809000 ASCII "CVE-2026-73318: Missing permission checks on agreement resets" XREF → Open post: CVE-2026-73318: Missing permission checks on agreement resets
000000000080A000 ASCII "CVE-2026-73319: JavaScript URI in dynamic redirects" XREF → Open post: CVE-2026-73319: JavaScript URI in dynamic redirects
000000000080B000 ASCII "CVE-2026-73320: Unauthenticated unfurl result disclosure" XREF → Open post: CVE-2026-73320: Unauthenticated unfurl result disclosure
000000000080C000 ASCII "CVE-2026-73321: Stack overflow in BBCode parsing" XREF → Open post: CVE-2026-73321: Stack overflow in BBCode parsing
000000000080D000 ASCII "CVE-2026-74239: Windows path traversal in style imports" XREF → Open post: CVE-2026-74239: Windows path traversal in style imports
000000000080E000 ASCII "Using Codex to audit XenForo, part 1: fourteen CVEs" XREF → Open post: Using Codex to audit XenForo, part 1: fourteen CVEs