stragart.com XSS vulnerability

Open Bug Bounty ID: OBB-522772 Description| Value ---|--- Affected Website:| stragart.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosur...

Mail.ru: XSS ( Работа с письмами )

Заходим в почту. 2. Настройки - Работа с письмами. Получаем GET запросом входящие параметры...

Open-Xchange: [XSS/CSRF] filter content-type bypass in Files

Hi. I found trick for inject any content-type for files. If content-type contains , then browser Chrome, Firefox skip content-type before , e.g.: any, text/html - text/html Upload any html/xml/svg/swf without extension F253137 and update mimetype: - "file":"filemimetype":"t,text/html" -...

kultur-forum-amthof.at XSS vulnerability

Open Bug Bounty ID: OBB-511924 Description| Value ---|--- Affected Website:| kultur-forum-amthof.at Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

egland.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-509596 Description| Value ---|--- Affected Website:| egland.co.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based ...

ldtv.co XSS vulnerability

On the 09.01.2018 security researcher reported a XSS vulnerability affecting the ldtv.co website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 9 January, 2018 20:49 GMT...

club.cyworld.com XSS vulnerability

Open Bug Bounty ID: OBB-506423 Description| Value ---|--- Affected Website:| club.cyworld.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

Ruby: Unix domain socket and a path containing a null character

Some methods on UNIX domain socket are not checked for null characters. vagrant@localhost $ ls /tmp vagrant@localhost $ irb irbmain:001:0 require 'socket' = true irbmain:002:0 UNIXServer.open"/tmp/socket\0ruby" |serv| irbmain:003:1 c = UNIXSocket.open"/tmp/socket\0sapphire" irbmain:004:1 s =...

tv.incheon.go.kr XSS vulnerability

Open Bug Bounty ID: OBB-497400 Description| Value ---|--- Affected Website:| tv.incheon.go.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

store.plesk.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-494167 Description| Value ---|--- Affected Website:| store.plesk.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on ISO...

daysawayfromhome.com XSS vulnerability

Open Bug Bounty ID: OBB-493876 Description| Value ---|--- Affected Website:| daysawayfromhome.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosur...

happybabyfood.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-489434 Description| Value ---|--- Affected Website:| happybabyfood.co.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

antvklik.com XSS vulnerability

Open Bug Bounty ID: OBB-488564 Description| Value ---|--- Affected Website:| antvklik.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lmb-gadeloc.com XSS vulnerability

Open Bug Bounty ID: OBB-486474 Description| Value ---|--- Affected Website:| lmb-gadeloc.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure bas...

metropolisatmetrotown.com XSS vulnerability

Open Bug Bounty ID: OBB-485603 Description| Value ---|--- Affected Website:| metropolisatmetrotown.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

t3n.de XSS vulnerability

Open Bug Bounty ID: OBB-485035 Description| Value ---|--- Affected Website:| t3n.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

anime-spin.net XSS vulnerability

Open Bug Bounty ID: OBB-484422 Description| Value ---|--- Affected Website:| anime-spin.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure base...

GitLab: SSRF vulnerability in gitlab.com webhook

1、 Login to your GitLab account and create a new project, then go to--https://gitlab.com/username/project/settings/integrations 2、 You can add url to ssrf.following are the steps to reproduce: If you enter http://127.0.0.1:80/haha.txt as url,we will get --Hook executed successfully but returned...

Mavenlink: CSRF Add user templates

Reproduction: ========== - Log in to account - Visit CSRF page below note default 30 seconds timeout, can be adjusted according to the connection speed: var a = window.open"https://app.mavenlink.com/projecttemplatesnew", "csrf", "height=100,width=100"; var intervalID = setTimeoutfunction a.close;...

speed-trix.com XSS vulnerability

Open Bug Bounty ID: OBB-481438 Description| Value ---|--- Affected Website:| speed-trix.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...