senzo-conseil.fr Cross Site Scripting vulnerability OBB-2334344

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Coinbase: Ethereum account balance manipulation

The researchers noticed an issue with our ETH receiving code when receiving from a contract. This allowed sending of ETH to Coinbase to be credited even if the underlying contract execution failed. The issue was fixed by changing the contract handling logic. Analysis of the issue indicated only...

auto.hna.de XSS vulnerability

Vulnerable URL: http://auto.hna.de/quicksearch.htm;jsessionid=8CB2DBE9CEECAEDD56588FE8B9121C7B.t1?QUERY=%3E%27%3E%22%3Es%3Ci%3Ei%3Cimg+src%3Dx+onerror%3Dprompt%28%2Fopenbugbounty%2F%29%3E=false=garageSearch Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:|...

augsburger-allgemeine.de XSS vulnerability

Vulnerable URL: http://www.augsburger-allgemeine.de/suche/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 20873 VIP website status:| Yes Check augsburger-allgemeine.de SSL...