Millions of Hotel Guests Worldwide Caught Up in Mass Data Leak

A widely used hotel reservation platform has exposed 10 million files related to guests at various hotels around the world, thanks to a misconfigured Amazon Web Services S3 bucket. The records include sensitive data, including credit-card details. Prestige Software’s “Cloud Hospitality” is used b...

planet-sports.de Cross Site Scripting vulnerability OBB-1488081

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

United Planet Intrexx Professional Cross-Site Scripting Vulnerability

United Planet Intrexx Professional is an integrated cross-platform development environment from United Planet Germany. It enables the creation of Web-based applications, enterprise portals, intranet portals and more. A cross-site scripting vulnerability exists in United Planet Intrexx Professiona...

planet-undies.com Cross Site Scripting vulnerability OBB-1381072

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

planet-undies.co.uk Cross Site Scripting vulnerability OBB-1365351

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

planet-sports.de Cross Site Scripting vulnerability OBB-1307549

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

planet-casio.com Cross Site Scripting vulnerability OBB-1252855

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

analogplanet.com Cross Site Scripting vulnerability OBB-1242869

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

planet-sports.de Cross Site Scripting vulnerability OBB-1197193

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

planet-sports.de Cross Site Scripting vulnerability OBB-1192334

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

planet-sports.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1186730 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

planet-sports.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1165646 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

planet-sports.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1164451 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

racing-planet.ch Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1140276 Security Researcher Dipu1A Helped patch 998 vulnerabilities Received 5 Coordinated Disclosure badges Received 21 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting racing-planet.ch website and...

racing-planet.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1140227 Security Researcher Dipu1A Helped patch 971 vulnerabilities Received 5 Coordinated Disclosure badges Received 21 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting racing-planet.de website and...

greeningplanet.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1130662 Security Researcher geeknik Helped patch 8664 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting greeningplanet.com website...

planet-sports.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1098661 Security Researcher raviakp1004 Helped patch 626 vulnerabilities Received 4 Coordinated Disclosure badges Received 5 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting planet-sports.de website...

CVE-2014-2025

Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it v...

Unrestricted file upload

Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it v...

CVE-2014-2025

Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it v...