clubangela.ch Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8544 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting clubangela.ch website and its users. Following coordinated...

promoneuve.fr Cross Site Scripting vulnerability

Security Researcher SkyEmie Helped patch 53 vulnerabilities Received 2 Coordinated Disclosure badges Received 4 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting promoneuve.fr website and its users. Following coordinated an...

nickexportcar.com Improper Access Control vulnerability

Security Researcher k0t Helped patch 2130 vulnerabilities Received 9 Coordinated Disclosure badges Received 95 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting nickexportcar.com website and its users. Following coordinated...

vrpack.com.ar Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1914 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting vrpack.com.ar website and its users. Following...

realtrader.com.br Cross Site Scripting vulnerability

Security Researcher CoderYounes Helped patch 1033 vulnerabilities Received 5 Coordinated Disclosure badges Received 8 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting realtrader.com.br website and its users. Following...

horg.com.tr Cross Site Scripting vulnerability

Security Researcher CoderYounes Helped patch 1033 vulnerabilities Received 5 Coordinated Disclosure badges Received 8 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting horg.com.tr website and its users. Following coordinate...

cnc-shopping.co.uk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-851293 Security Researcher calv1n Helped patch 22043 vulnerabilities Received 12 Coordinated Disclosure badges Received 37 recommendations , a holder of 12 badges for responsible and coordinated disclosure, found a security vulnerability affecting cnc-shopping.co.uk websit...

overstock.getyourcouponcodes.com Cross Site Scripting vulnerability

Security Researcher logindenied Helped patch 7927 vulnerabilities Received 8 Coordinated Disclosure badges Received 76 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting overstock.getyourcouponcodes.com website and its users...

dentergem.be Cross Site Scripting vulnerability

Security Researcher calv1n Helped patch 22043 vulnerabilities Received 12 Coordinated Disclosure badges Received 37 recommendations , a holder of 12 badges for responsible and coordinated disclosure, found a security vulnerability affecting dentergem.be website and its users. Following coordinate...

sidoarjokab.bps.go.id Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-847268 Security Researcher calv1n Helped patch 22043 vulnerabilities Received 12 Coordinated Disclosure badges Received 37 recommendations , a holder of 12 badges for responsible and coordinated disclosure, found a security vulnerability affecting sidoarjokab.bps.go.id...

blaskapelle-cursdorf.de Cross Site Scripting vulnerability

Security Researcher CoderYounes Helped patch 1033 vulnerabilities Received 5 Coordinated Disclosure badges Received 8 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting blaskapelle-cursdorf.de website and its users. Followin...

funnelvisionfam.com Cross Site Scripting vulnerability

Security Researcher logindenied Helped patch 7927 vulnerabilities Received 8 Coordinated Disclosure badges Received 76 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting funnelvisionfam.com website and its users. Following...

carijasa.co.id Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8594 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting carijasa.co.id website and its users. Following coordinate...

beloitdailynews.wi.newsmemory.com Cross Site Scripting vulnerability

Security Researcher AndreaDraghetti Helped patch 19 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting beloitdailynews.wi.newsmemory.com website and its users. Following coordinated a...

boatrightreunion.org Cross Site Scripting vulnerability

Security Researcher SwapnilKotha Helped patch 195 vulnerabilities Received 2 Coordinated Disclosure badges Received 1 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting boatrightreunion.org website and its users. Following...

Server side request forgery (ssrf)

A flaw was found in Moodle versions 3.1 to 3.1.15 and earlier unsupported versions. The mybackpack functionality allowed setting the URL of badges, when it should be restricted to the Mozilla Open Badges backpack URL. This resulted in the possibility of blind SSRF via requests made by the page...

CVE-2019-3809

A flaw was found in Moodle versions 3.1 to 3.1.15 and earlier unsupported versions. The mybackpack functionality allowed setting the URL of badges, when it should be restricted to the Mozilla Open Badges backpack URL. This resulted in the possibility of blind SSRF via requests made by the page...

CVE-2019-3809

A flaw was found in Moodle versions 3.1 to 3.1.15 and earlier unsupported versions. The mybackpack functionality allowed setting the URL of badges, when it should be restricted to the Mozilla Open Badges backpack URL. This resulted in the possibility of blind SSRF via requests made by the page...

Server-side Request Forgery (SSRF)

moodle/moodle is vulnerable to server-side request forgery SSRF. The vulnerability allows an attacker to cause the server to issue requests to arbitrary hosts via the backpackurl in badges/backpackform.php...

Discourse < 2.2.0.beta9 XSS Vulnerability

Discourse is prone to a cross-site scripting vulnerability with badges. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...