20626 matches found
Open-Xchange: [XSS] content_disposition=inline in files
Hi. No filter for application/ when contentdisposition=inline PoC: - 1. Auth https://sandbox.open-xchange.com/ajax/share/021f28560fbe7d5b21f28d3fbe7d42379932c8eb965ee141/1/8/NTc/NTcvMzQ4 2. XSS...
impreglon.nl XSS vulnerability
Open Bug Bounty ID: OBB-620474 Description| Value ---|--- Affected Website:| impreglon.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
heralddemocrat.com XSS vulnerability
Open Bug Bounty ID: OBB-620421 Description| Value ---|--- Affected Website:| heralddemocrat.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
providencejournal.com XSS vulnerability
Open Bug Bounty ID: OBB-620416 Description| Value ---|--- Affected Website:| providencejournal.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
wickedlocal.com XSS vulnerability
Open Bug Bounty ID: OBB-620254 Description| Value ---|--- Affected Website:| wickedlocal.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Mail.ru: Раскрытие IP, почты и другой полезной информации lootdog.io
After the deal, service was disclosing some unnecessary counterparty's information IP address and e-mail...
cattleusa.com XSS vulnerability
Open Bug Bounty ID: OBB-619719 Description| Value ---|--- Affected Website:| cattleusa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
volkswagen.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-619402 Description| Value ---|--- Affected Website:| volkswagen.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Uber: Reflected XSS in https://eng.uberinternal.com and https://coeshift.corp.uber.internal/
The base parameter of /oidauth/prompt on multiple uberinternal.com subdomains was not sanitized before being reflected into the page body, making it vulnerable to reflected XSS. Additionally, these pages were affected by a clickjacking vulnerability that made exploitation easier, since a click wa...
bgimmo33.fr XSS vulnerability
Open Bug Bounty ID: OBB-618858 Description| Value ---|--- Affected Website:| bgimmo33.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...
casea-immobilier.fr XSS vulnerability
Open Bug Bounty ID: OBB-618814 Description| Value ---|--- Affected Website:| casea-immobilier.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...
lickbike.com XSS vulnerability
Open Bug Bounty ID: OBB-618727 Description| Value ---|--- Affected Website:| lickbike.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
impressionbridal.com XSS vulnerability
Open Bug Bounty ID: OBB-618443 Description| Value ---|--- Affected Website:| impressionbridal.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
addtoany.com XSS vulnerability
Open Bug Bounty ID: OBB-618244 Description| Value ---|--- Affected Website:| addtoany.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Valve: Unfiltered input allows for XSS in "Playtime Item Grants" fields
Enter "test in any of the 3 fields, save it and reload the page. Impact Stored XSS, could possibly break some internal features too as the stored value is not an integer. The hacker selected the Cross-site Scripting XSS - Stored weakness. This vulnerability type requires contextual information fr...
dbvis-s.cleverbridge.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-617381 Description| Value ---|--- Affected Website:| dbvis-s.cleverbridge.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
macom.com XSS vulnerability
Open Bug Bounty ID: OBB-617023 Description| Value ---|--- Affected Website:| macom.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
winsorgallery.com XSS vulnerability
Open Bug Bounty ID: OBB-616480 Description| Value ---|--- Affected Website:| winsorgallery.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Phabricator: Administrator can create user without entering high security mode
When an administrator wants to create a user, he can go to https://phabricator.example.com/people/create/ and will be required to enter his MFA token in order to enter high security mode. However, if an administrator goes to https://phabricator.example.com/people/new/standard/ he will bypass the...