20626 matches found
embedsocial.com Cross Site Scripting vulnerability OBB-1428655
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
mwsick.com Cross Site Scripting vulnerability OBB-1426226
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
VK.com: XSS Reflected in m.vk.com
XSS on the wall in m.vk.com...
bag489.com Cross Site Scripting vulnerability OBB-1421456
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
karapost.de Cross Site Scripting vulnerability OBB-1418688
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
kalkulatorcinta.com Cross Site Scripting vulnerability OBB-1417404
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
hlstester.com Cross Site Scripting vulnerability OBB-1409088
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
galleries.firstclasspov.com Cross Site Scripting vulnerability OBB-1408796
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Ubiquiti Inc.: Camera adoption DoS - UniFi Protect
A vulnerability was found in UniFi Protect v1.13.7 and earlier that would allow an attacker to use spoofed cameras to perform a denial-of-service attack that could cause the UniFi Protect controller to crash. This vulnerability is fixed in UniFi Protect v1.17.1 and later versions. Affected...
sso.sc.ac.kr Cross Site Scripting vulnerability OBB-1407442
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Uber: RCE via npm misconfig -- installing internal libraries from the public registry
The hacker spotted some orphaned references to Uber-branded Node.js library packages and claimed them on the public NPM registry to run their own proof-of-concept code. Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies...
daegegung.com Cross Site Scripting vulnerability OBB-1403297
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
businesscardtemplateweb.com Cross Site Scripting vulnerability OBB-1402581
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
TikTok: User In The Same Center Can Create CSRF To Change The Information About Business
A Cross Site Request Forgery CSRF vulnerability was reported on the TikTok ads portal. This flaw has since been remediated. We thank @sniper302 for reporting this vulnerability to our team...
billypughchina.com Cross Site Scripting vulnerability OBB-1400869
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
baymls.com Cross Site Scripting vulnerability OBB-1399657
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Mail.ru: Access User Tickets via IDOR in [widget.support.my.games]
IDOR vulnerability in widget.support.my.games allowed to disclose the user tickets...
Bumble: Identify unique user ID of all the profiles
Through this vulnerability, one can know the unencrypted user ID of all the profiles Steps to reproduce: 1. Login to your Bumble profile 2. In the SERVERGETUSERLIST API replace the folder ID 0 with 7. This folder contains all the profiles in your deck /which you have right-swiped on screenshot 1;...
Ian Dunn: SSRF Possible through /wordpress/xmlrpc.php
Hello, I have found a SSRF in iandunn.name through the xmlrpc.php API. I understood you've said about this endpoint in the past making up junk reports, but this is on a function which isn't disabled by disabling the endpoint, as I can prove with a Proof-Of-Concept. There is a function using...