HackerOne: Leakage badges on disabled user

Indonesia Here ; Hi HackerOne Team, Description: This attack occurs when an attacker uses this graphql code: and this builds the path of the attacker getting disclosure information about how many programs already in the close Resolved from the Public or Disable user. okay now I do not say if the...

LocalTapiola: Reflected XSS (myynti.lahitapiolarahoitus.fi)

Basic report information Summary: There is an Reflected XSS on myynti.lahitapiolarahoitus.fi. Description: There is an Reflected XSS on myynti.lahitapiolarahoitus.fi website. redirect parameter is vulnerable to XSS. Impact: Steals cookies from other logged in users. Browsers / Apps Verified In:...

softonet.pl Open Redirect vulnerability

Open Bug Bounty ID: OBB-577902 Description| Value ---|--- Affected Website:| softonet.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

schebaum.net XSS vulnerability

Open Bug Bounty ID: OBB-577502 Description| Value ---|--- Affected Website:| schebaum.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nintendo.com XSS vulnerability

Open Bug Bounty ID: OBB-576066 Description| Value ---|--- Affected Website:| nintendo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

andindia.com XSS vulnerability

Open Bug Bounty ID: OBB-576019 Description| Value ---|--- Affected Website:| andindia.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

magiccorser.com XSS vulnerability

Open Bug Bounty ID: OBB-575898 Description| Value ---|--- Affected Website:| magiccorser.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

opac-x-mediathequeploudalmezeau.biblix.net XSS vulnerability

Open Bug Bounty ID: OBB-575401 Description| Value ---|--- Affected Website:| opac-x-mediathequeploudalmezeau.biblix.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

oddslot.com XSS vulnerability

Open Bug Bounty ID: OBB-575338 Description| Value ---|--- Affected Website:| oddslot.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kikinote.net XSS vulnerability

Open Bug Bounty ID: OBB-575282 Description| Value ---|--- Affected Website:| kikinote.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

rollapp.com XSS vulnerability

Open Bug Bounty ID: OBB-573955 Description| Value ---|--- Affected Website:| rollapp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

teekarnyang.com XSS vulnerability

Open Bug Bounty ID: OBB-573582 Description| Value ---|--- Affected Website:| teekarnyang.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Mail.ru: XSS в нике при запросе в контакты.

Stored XSS in web.icq.com via nickname in contact add request...

VK.com: Смотрим фотографии из частных/закрытых групп.

Просмотр закрытых фотографий. Жестки хак на просмотр любых фоток из любых груп + возможность их лаека и получения хеша для любого пользователя...

Vanilla: xss reflected in littleguy.vanillastaging.com

Go littleguy.vanillastaging.com create a account and go http://littleguy.vanillastaging.com/discussion/comment/ Go: http://littleguy.vanillastaging.com/discussion/comment/6'%22%26%25%22%3E%3Csvg/onload=prompt1%3E/ Paylaod:PAyload: 6'%22%26%25%22%3E%3Csvg/onload=prompt1%3E/ xss Reflejected Impact ...

Mail.ru: XSS в названии лайвчата

Stored XSS in web.icq.com via livechat name...

corriereadriatico.it XSS vulnerability

Open Bug Bounty ID: OBB-571806 Description| Value ---|--- Affected Website:| corriereadriatico.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

smidttech.org XSS vulnerability

Open Bug Bounty ID: OBB-570183 Description| Value ---|--- Affected Website:| smidttech.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

impact.jobs XSS vulnerability

Open Bug Bounty ID: OBB-569972 Description| Value ---|--- Affected Website:| impact.jobs Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based o...

europapark.de XSS vulnerability

Open Bug Bounty ID: OBB-569545 Description| Value ---|--- Affected Website:| europapark.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...