Design/Logic Flaw

Nifty Project Management Web Application 2020-08-26 allows XSS, via Add Task, that is rendered upon a Project Home visit. Note: It has been argued that this is not reproducible. "The original issue was that the task would be created and an alert would be shown on the screen. Now the task would be...

CVE-2020-25071

Nifty Project Management Web Application 2020-08-26 allows XSS, via Add Task, that is rendered upon a Project Home visit. Note: It has been argued that this is not reproducible. "The original issue was that the task would be created and an alert would be shown on the screen. Now the task would be...

CVE-2020-25071

Nifty Project Management Web Application has an XSS issue via the Add Task feature, which is rendered when visiting the Project Home. The original problem involved creating a task and showing an alert, but it has been argued that this is not reproducible since attributes are stripped and the aler...

Metasploit Wrapup

Metasploit Hackathon We were happy to host the very first Metasploit framework open source hackathon this past week in the Rapid7 Austin. Eight Metasploit hackers from outside of Rapid7 joined forces with the in-house team and worked on a lot of great projects, small and large. @bcook started the...

nifty.com XSS vulnerability

Open Bug Bounty ID: OBB-204070 Description| Value ---|--- Affected Website:| nifty.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

qa.nifty.com XSS vulnerability

Vulnerable URL: http://qa.nifty.com/cs/catalog/faqnsearch/qalist/1.htm?ko=%3C/option%3E%3C/select%3E%3Csvg%20onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 15.06.2016 Latest check for patch:| 15.06.2016 15:53 GMT Vulnerability type:| XSS Vulnerability...