39 matches found
bon-allez.fr Cross Site Scripting vulnerability OBB-3492324
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
bon-allez.fr Cross Site Scripting vulnerability OBB-3483607
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
bon-sejour-en-france.fr Cross Site Scripting vulnerability OBB-3477053
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-25784
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bon Plan Gratos Sticky Ad Bar plugin = 1.3.1 versions...
CVE-2023-25784
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bon Plan Gratos Sticky Ad Bar plugin = 1.3.1 versions...
CVE-2023-25784 WordPress Sticky Ad Bar Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bon Plan Gratos Sticky Ad Bar plugin = 1.3.1 versions...
CVE-2023-25784
CVE-2023-25784 refers to an admin+ stored XSS in the WordPress plugin Sticky Ad Bar (older name variants) up to version 1.3.1. Public sources in the connected documents consistently describe the flaw as arising from inadequate sanitization/escaping of plugin settings, enabling stored XSS by high-...
CVE-2023-25784 WordPress Sticky Ad Bar Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bon Plan Gratos Sticky Ad Bar plugin = 1.3.1 versions...
bon-cadeau-institut-cinderella.com Cross Site Scripting vulnerability OBB-1412584
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
bon-app.ch Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-940253 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting bon-app.ch website and its...
bon-reduc.be XSS vulnerability
Open Bug Bounty ID: OBB-714504 Description| Value ---|--- Affected Website:| bon-reduc.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unt...
WordPress BackWpUP 3.6.6 Database Disclosure
Exploit Title : WordPress BackWpUP Plugins 3.6.6 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepage : wordpress.org/plugins/backwpup/ Software Download Link : downloads.wordpress.org/plugin/backwpup.3.6.6.zip...
bon-appetit.ch XSS vulnerability
Open Bug Bounty ID: OBB-664865 Description| Value ---|--- Affected Website:| bon-appetit.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
bon-shop3.de XSS vulnerability
Open Bug Bounty ID: OBB-609010 Description| Value ---|--- Affected Website:| bon-shop3.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
bon-kredit.de XSS vulnerability
Vulnerable URL: https://www.bon-kredit.de/res/flash/bkselbst120x600v11.swf?clickTag=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 312075 VIP website...
bon-reduc.com XSS vulnerability
Open Bug Bounty ID: OBB-157116 Description| Value ---|--- Affected Website:| bon-reduc.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...
Information disclosure
The Tim Ban Bon Phuong aka com.entertaiment.timbanbonphuong application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7017
The Tim Ban Bon Phuong aka com.entertaiment.timbanbonphuong application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7017
The CVE-2014-7017 entry describes an Android app, Tim Ban Bon Phuong (com.entertaiment.timbanbonphuong) version 2.2, that does not verify SSL/TLS X.509 certificates. This misconfiguration in the app’s network code enables man-in-the-middle attackers to spoof servers and obtain sensitive informati...