imcopack.com Cross Site Scripting vulnerability

Security Researcher Dipu1A Helped patch 960 vulnerabilities Received 5 Coordinated Disclosure badges Received 20 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting imcopack.com website and its users. Following coordinated an...

associations-v2beta.paris.fr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-991113 Security Researcher Rbcafe Helped patch 266 vulnerabilities Received 3 Coordinated Disclosure badges Received 8 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting associations-v2beta.paris.fr...

genesisinside.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-990676 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting genesisinside.ru website an...

thewilson.tk Cross Site Scripting vulnerability

Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting thewilson.tk website and its users. Following coordinate...

portaldoaluno.vemprafam.com.br Cross Site Scripting vulnerability

Security Researcher naldron Helped patch 13 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting portaldoaluno.vemprafam.com.br website and its users. Following coordinated and...

muribeca.se.gov.br Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-980381 Security Researcher devl00p Helped patch 2974 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting muribeca.se.gov.br websit...

vallada.listado-empresas.es Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-979781 Security Researcher Gh05tPT Helped patch 6901 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting vallada.listado-empresas....

orlandonissanlatino.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-976218 Security Researcher devl00p Helped patch 2974 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting orlandonissanlatino.com...

th.themediajob.com Cross Site Scripting vulnerability

Security Researcher garletmarco Helped patch 1540 vulnerabilities Received 4 Coordinated Disclosure badges , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting th.themediajob.com website and its users. Following coordinated and responsible...

CVE-2019-5463

An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6...

UBUNTU-CVE-2019-5463

An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6...

CVE-2019-5463

Removed by vendor...

CVE-2019-5463: Exposure of Sensitive Information to an Unauthorized Actor

An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6...

PT-2019-17691 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 11.11.6 GitLab CE/EE versions prior to 12.0.4 GitLab CE/EE versions prior to 12.1.2 Description: An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint, which could result in disclosu...

showgirl.com.tw Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-958785 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting showgirl.com.tw website and...

4-ecorp.com Cross Site Scripting vulnerability

Security Researcher DerCraig Helped patch 24 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting 4-ecorp.com website and its users. Following coordinated and responsible vulnerability...

mygame.co.uk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-953661 Security Researcher Sameull Helped patch 271 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting mygame.co.uk website and its users. Following coordinate...

mysearch.site Cross Site Scripting vulnerability

Security Researcher k0t Helped patch 2130 vulnerabilities Received 9 Coordinated Disclosure badges Received 95 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting mysearch.site website and its users. Following coordinated and...

Talos DEFCON badge build instructions and use

By Patrick Mullen. We want to thank everyone who stopped by the Cisco Talos booth at DEFCON's Blue Team Village earlier this month. We handed out these badges at our area where we had Snort rules challenges, reverse-Capture the Flag and recruiters ready to answer attendees' career advice question...

DEF CON 27 retrospective: badge life redux

Kickstarter or DEF CON attendee? Be forewarned, this light overview contains some mild spoilers. If you want the purest “Da Bomb” experience with no web-based OSINT hints, read no further. I’m not revealing any earth-shattering secrets here, but figured it was worth mentioning. Also DEF CON is ov...