386 matches found
football-toto.info Cross Site Scripting vulnerability OBB-2417900
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
7Rapid Questions: Stephen Donnelly
At Rapid7, there's no shortage of passionate leaders looking to challenge convention and make an impact. Our "7Rapid Questions" series is a way to highlight some of the amazing work taking place behind the scenes, and the exciting growth opportunities available in our global offices. For this...
Hacker steals govt database with info of entire Argentine population
By Deeba Ahmed Reportedly, the database also contains personal information of Argentinian President Alberto Fernández, football superstars Sergio Aguero and Lionel Messi. This is a post from HackRead.com Read the original post: Hacker steals govt database with info of entire Argentine population...
Alphaware E-Commerce System 1.0 - Unauthenicated Remote Code Execution Exploit
Exploit Title: Alphaware E-Commerce System 1.0 - Unauthenicated Remote Code Execution File Upload + SQL injection Exploit Author: Christian Vierschilling Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/11676/alphaware-simple-e-commerce-system.html...
A week in security (October 12 – October 18)
Last week on Malwarebytes Labs, we looked at journalism’s role in cybersecurity on our Lock and Code podcast, gave tips for safer shopping on Amazon Prime day, and discussed an APT attack springing into life as Academia returned to the real and virtual campus environment. We also dug into potenti...
nl.soccermanager.com Cross Site Scripting vulnerability OBB-1318294
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
blogs.usafootball.com Cross Site Scripting vulnerability OBB-1317122
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
japan.americanfootball.jp Cross Site Scripting vulnerability OBB-1217852
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
academy.americanfootball.jp Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1114251 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting academy.americanfootball....
WordPress football-pool plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. football-pool is a plugin that analyzes statistics of soccer matches. A cross-site scripting vulnerability exists in the WordPress...
CVE-2017-18524
The football-pool plugin before 2.6.5 for WordPress has multiple XSS issues...
CVE-2017-18524
The football-pool plugin before 2.6.5 for WordPress has multiple XSS issues...
CVE-2017-18524
The football-pool plugin before 2.6.5 for WordPress has multiple XSS issues...
CVE-2017-18524
The football-pool WordPress plugin (before 2.6.5) has multiple XSS vulnerabilities. Affected component: football-pool plugin for WordPress; root cause: multiple cross-site scripting issues. Impact is client-side code execution in some contexts; exploitation status is not provided in the documents...
PT-2019-8458 · WordPress · Football-Pool
Name of the Vulnerable Software and Affected Versions: WordPress football-pool plugin versions prior to 2.6.5 Description: The issue concerns multiple XSS problems. Recommendations: For versions prior to 2.6.5, update to version 2.6.5 or later to resolve the issue...
Alliance of American Football : Stored xss in address field in billing activity at https://shop.aaf.com/Order/step1/index.cfm
Dear Team, Summary: add summary of the vulnerability After looking into https://shop.aaf.com/Order/step1/index.cfm i get to know that there is address field is vulnerable to stored xss which can lead to steal any user's cookie and can lead to complete account takeover Description: add more detail...
football-lineups.com XSS vulnerability
Open Bug Bounty ID: OBB-663881 Description| Value ---|--- Affected Website:| football-lineups.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
football-direct.com XSS vulnerability
Open Bug Bounty ID: OBB-662544 Description| Value ---|--- Affected Website:| football-direct.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
vintagefootballshirts.com XSS vulnerability
Open Bug Bounty ID: OBB-658658 Description| Value ---|--- Affected Website:| vintagefootballshirts.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
thornhillcricketandbowlingclub.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-640286 Description| Value ---|--- Affected Website:| thornhillcricketandbowlingclub.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...