balenciaga.com XSS vulnerability

Open Bug Bounty ID: OBB-456555 Description| Value ---|--- Affected Website:| balenciaga.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

terryfoxsecondary.datasubmit.ca XSS vulnerability

Open Bug Bounty ID: OBB-456539 Description| Value ---|--- Affected Website:| terryfoxsecondary.datasubmit.ca Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

QIWI: Information disclosure on https://paycard.rapida.ru

Hello, I would like to report information disclosure on one of your sub-domains due to some files that might contain some useful information. Basically i have found 3 files that might giveaway some information about the infrastructure : 1 composer.json 2 composer.lock 3 package.json I found all t...

hobbyplay.net XSS vulnerability

Open Bug Bounty ID: OBB-455780 Description| Value ---|--- Affected Website:| hobbyplay.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

peterscottcars.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-455714 Description| Value ---|--- Affected Website:| peterscottcars.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Open-Xchange: [XSS] Mail <style> v2.0

Hi. New way for 269116. Testing rev17. OX check data before remove / /, therefore a filter bypass: html .a font-family: ; font-family: ; font-family: ; For example: json "content": ".a font-family: ", Result: html ox-c3a5f76596 .ox-c3a5f76596-a font-family: Impact malicious code injection...

russian-laws.com XSS vulnerability

Open Bug Bounty ID: OBB-455537 Description| Value ---|--- Affected Website:| russian-laws.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Informatica: [marketplace.informatica.com] - Template Injection

The researcher has identified and reported a "Template Injection" vulnerability in one of Informatica's domain and helped us in resolving the issue...

interactivebrokers.com.hk XSS vulnerability

Vulnerable URL: https://www.interactivebrokers.com.hk/Universal/servlet/formWelcome?p=100=ADV=US" Details: Description| Value ---|--- Patched:| Yes, at 25.12.2017 Latest check for patch:| 25.12.2017 08:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 70334 VIP...

tpd.sk XSS vulnerability

Vulnerable URL: https://www.tpd.sk/elektronika-a-spotrebice-c20073?page=2%22%3E%3Cimg%20src=1%20onerror=alert%22OPENBUGBOUNTY%22%3E.gif Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 98297 VIP website status:| N...

watchmegrow.com XSS vulnerability

Open Bug Bounty ID: OBB-455253 Description| Value ---|--- Affected Website:| watchmegrow.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

txcourts.gov XSS vulnerability

Open Bug Bounty ID: OBB-455116 Description| Value ---|--- Affected Website:| txcourts.gov Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

clear.potsdam.edu XSS vulnerability

Open Bug Bounty ID: OBB-454713 Description| Value ---|--- Affected Website:| clear.potsdam.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

bigbluedivelights.com XSS vulnerability

Vulnerable URL: http://www.bigbluedivelights.com/products-search.asp Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 934674 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

aberdeen.enquira.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-454546 Description| Value ---|--- Affected Website:| aberdeen.enquira.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

metabattle.com XSS vulnerability

Open Bug Bounty ID: OBB-454431 Description| Value ---|--- Affected Website:| metabattle.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dyslexbrowser.cz XSS vulnerability

Open Bug Bounty ID: OBB-454408 Description| Value ---|--- Affected Website:| dyslexbrowser.cz Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

buhlergroup.com XSS vulnerability

Open Bug Bounty ID: OBB-454380 Description| Value ---|--- Affected Website:| buhlergroup.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

abcnews.go.com XSS vulnerability

Open Bug Bounty ID: OBB-454333 Description| Value ---|--- Affected Website:| abcnews.go.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

youdeal.ro XSS vulnerability

Vulnerable URL: https://www.youdeal.ro/searches/quicksearch Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1643779 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerabilit...