4securemail.com XSS vulnerability

Open Bug Bounty ID: OBB-685239 Description| Value ---|--- Affected Website:| 4securemail.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

riversideaviaries.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-684594 Description| Value ---|--- Affected Website:| riversideaviaries.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

antsurf.com XSS vulnerability

Open Bug Bounty ID: OBB-683925 Description| Value ---|--- Affected Website:| antsurf.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

paintbrushadventures.com XSS vulnerability

Open Bug Bounty ID: OBB-683755 Description| Value ---|--- Affected Website:| paintbrushadventures.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...

QIWI: Возможность регистрации на сайте qiwi.com на любой номер телефона

Summary При регистрации на сайте qiwi.com присылается один и тот же код подтверждения в СМС. Impact Возможность зарегистрироваться под любым новым пользователем за счет перебора кода из СМС...

Mail.ru: XSS in e.mail.ru

XSS via dom clobbering on message reply composing...

lab.pecena.cz Improper Access Control vulnerability

Open Bug Bounty ID: OBB-682908 Description| Value ---|--- Affected Website:| lab.pecena.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| hidde...

HackerOne: Disclosing a private program in an external link if program is paused

Summary: Hi team Description: If the program is paused that we will not be able to send reports to this program and if we try to directly contact the link https://hackerone.com/externalprogrammpaused/reports/new we will be returned to the main page https://hackerone.com/externalprogrammpaused Ste...

Mail.ru: Найден build.sh в webagent.mail.ru

Source code of build script for web application was available for download. It could leak some non-sensitive information on internal build processes and configurations...

Chaturbate: No rate limiting in starting up a bot.

hi security team, I was able to start up a bot numerous times. 1. Goto https://chaturbate.com/b/username 2. Choose a bot and capture the request. 3. Send to intruder and repeat the step numerous times. 4. I did this 196times 5.I was able to activate a bot numerous times 6. My room was flooded wit...

Chaturbate: No rate limiting in changing room subject.

Before i shed more light on this: I noticed i can create over 200 apps but i don't really know how valid that was. I want to report that there is no rate limiting in changing room subject. Attacker scenrio: 1. Navigate to https://chaturbate.com/b/your username 2. Try to create a room subject and...

fun.pics.free.fr XSS vulnerability

Open Bug Bounty ID: OBB-682205 Description| Value ---|--- Affected Website:| fun.pics.free.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Starbucks: Thailand - a small number of SMB CCTV footage backup servers were accessible without authentication.

radoooz discovered that a small number of SMB servers in Thailand that hosted CCTV footage and images were accessible without requiring authentication. @radoooz — thank you for reporting this vulnerability and confirming the resolution...

camasiryikamaoyunlari.com XSS vulnerability

Open Bug Bounty ID: OBB-681559 Description| Value ---|--- Affected Website:| camasiryikamaoyunlari.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

shopdisney.fr XSS vulnerability

Open Bug Bounty ID: OBB-681453 Description| Value ---|--- Affected Website:| shopdisney.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Chaturbate: Chaturbate "/chat_ignore_list/" endpoint does not check for Account status: Disabled before adding Ignore via POST

Summary Chaturbate.com provides the ability for its users when in chat to ignore other users in chat rooms via DM etc by adding their camhandle name to ignorelist via HUI Actually this is just a POST to /chatignorelist/ getting as a parameter the username which is the camhandle name in order to a...

h1-5411-CTF: CTF Writeup flag{cha1n1ng_bugs_f0r_fun_4nd_pr0f1t?_or_rep0rt_an_LF1}

We have attached the writeup, the CTF was solved by me and Chapuka. We would like to publish our writeup for the CTF in our blog, when can we do that? It was a great CTF, it's a shame we are not @Buenos Aires right now :/ Impact...

browardfactory.com XSS vulnerability

Open Bug Bounty ID: OBB-680475 Description| Value ---|--- Affected Website:| browardfactory.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

brothers.se XSS vulnerability

Open Bug Bounty ID: OBB-680461 Description| Value ---|--- Affected Website:| brothers.se Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nutrition411.com XSS vulnerability

Open Bug Bounty ID: OBB-680436 Description| Value ---|--- Affected Website:| nutrition411.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...