Omise: Broken Authentication and Session Management Flaw After Change Password and Logout

Summary Usually it's happened that when you change password or sign out from one place or one browser, automatically someone who is open same account will sign out too from another browser. Basically your session destroyed at server side... But in your site, it still alive.. PoC Detail About...

socialbarrel.com XSS vulnerability

Open Bug Bounty ID: OBB-694147 Description| Value ---|--- Affected Website:| socialbarrel.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

gaon08084.godo.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-686731 Description| Value ---|--- Affected Website:| gaon08084.godo.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

beerlinetoday.net XSS vulnerability

Open Bug Bounty ID: OBB-675729 Description| Value ---|--- Affected Website:| beerlinetoday.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

diabetik.guru XSS vulnerability

Open Bug Bounty ID: OBB-637070 Description| Value ---|--- Affected Website:| diabetik.guru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

www-hermes.desy.de XSS vulnerability

Open Bug Bounty ID: OBB-567752 Description| Value ---|--- Affected Website:| www-hermes.desy.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jobs.id XSS vulnerability

Open Bug Bounty ID: OBB-485486 Description| Value ---|--- Affected Website:| jobs.id Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on IS...

interroll.com XSS vulnerability

Open Bug Bounty ID: OBB-459742 Description| Value ---|--- Affected Website:| interroll.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

ges2.bell.ca XSS vulnerability

Open Bug Bounty ID: OBB-453676 Description| Value ---|--- Affected Website:| ges2.bell.ca Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

holdenmedia.digitickets.co.uk Open Redirect vulnerability

Open Bug Bounty ID: OBB-407679 Description| Value ---|--- Affected Website:| holdenmedia.digitickets.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Chea...

pa4jj.nl XSS vulnerability

Open Bug Bounty ID: OBB-401850 Description| Value ---|--- Affected Website:| pa4jj.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

susjmk.cz XSS vulnerability

Open Bug Bounty ID: OBB-385585 Description| Value ---|--- Affected Website:| susjmk.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mcdermott.mua.hrdepartment.com XSS vulnerability

Open Bug Bounty ID: OBB-210831 Description| Value ---|--- Affected Website:| mcdermott.mua.hrdepartment.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nz.boats.com XSS vulnerability

Open Bug Bounty ID: OBB-185382 Description| Value ---|--- Affected Website:| nz.boats.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

New Relic: Session Management Flaw

Hi, Sir I found a Vulnuberlity in your Website. Called Session Management Flaw You can Know More About This Flaw through OWASP Guide https://www.owasp.org/index.php?title=BrokenAuthenticationandSessionManagement&setlang=en in this Loop Hole The Application Is Not Destroying the Session After...

Coursera: Broken authentication and session management flaw

In this Loop Hole The Application does not destroy session after logout.. means the cookies are working to login to user account & change account Information, The Cookies are usable after many hours of logout about after 1 day i'm able to access the account & edit info. Steps To Reproduce This...

l.jegs.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-162133 Description| Value ---|--- Affected Website:| l.jegs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

skillsbank.bahamas.gov.bs XSS vulnerability

Open Bug Bounty ID: OBB-128292 Description| Value ---|--- Affected Website:| skillsbank.bahamas.gov.bs Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventi...

arisp.com.br XSS vulnerability

Open Bug Bounty ID: OBB-117065 Description| Value ---|--- Affected Website:| arisp.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wiki.openelec.tv XSS vulnerability

Open Bug Bounty ID: OBB-115693 Description| Value ---|--- Affected Website:| wiki.openelec.tv Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...