John Jean https://johnjean.io/ Security advisories and research by John Jean. en Amazon: API cryptographic verification badly implemented https://johnjean.io/advisories/amazon-api-cryptographic-verification/ https://johnjean.io/advisories/amazon-api-cryptographic-verification/ Tue, 03 Nov 2015 00:00:00 +0000 Invision Power Board <= 3.4.4: admin account takeover leading to code execution (CVE-2013-3725) https://johnjean.io/advisories/invision-power-board-admin-account-takeover/ https://johnjean.io/advisories/invision-power-board-admin-account-takeover/ Mon, 13 May 2013 00:00:00 +0000 Facebook: XSS / CSRF worms on the social network https://johnjean.io/advisories/facebook-xss-csrf-worms/ https://johnjean.io/advisories/facebook-xss-csrf-worms/ Tue, 05 Oct 2010 00:00:00 +0000 PunBB <= 1.2.13: multiple vulnerabilities (CVE-2006-5735, CVE-2006-5736, CVE-2006-5737) https://johnjean.io/advisories/punbb-multiple-vulnerabilities/ https://johnjean.io/advisories/punbb-multiple-vulnerabilities/ Sun, 29 Oct 2006 00:00:00 +0000