lead-und-coach.de Cross Site Scripting vulnerability OBB-2726383

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pg-coach-finistere.fr Cross Site Scripting vulnerability OBB-2139848

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CyberAegis Aether Competition Team Reflects Bright Future for Young Women in STEM & Cybersecurity

I am always excited to get involved in conversations around getting more young women into STEM earlier. Recently, I was able to catch up with the members of the CyberAegis Aether team, an all-girls, middle school cybersecurity competition team. Here is what they had to say: Tell us a little bit...

coachingverband.org XSS vulnerability

Open Bug Bounty ID: OBB-550784 Description| Value ---|--- Affected Website:| coachingverband.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

teacherjobfairs.org XSS vulnerability

Open Bug Bounty ID: OBB-410573 Description| Value ---|--- Affected Website:| teacherjobfairs.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

ratemysoccercoach.com XSS vulnerability

Vulnerable URL: http://www.ratemysoccercoach.com/coachsearch.php?coachid=1"...

UP® – Smart Coach for Health - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application UP® – Smart Coach for Health published at the 'play' market has multiple vulnerabilities...

Latein Coach - Corrupted files, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Latein Coach published at the 'play' market has multiple vulnerabilities...

Noom Coach: Weight Loss Plan - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Noom Coach: Weight Loss Plan published at the 'play' market has multiple vulnerabilities...

Hydro Coach - drink water - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Hydro Coach - drink water published at the 'play' market has multiple vulnerabilities...

National Express Coach - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application National Express Coach published at the 'play' market has multiple vulnerabilities...

Valedo – digital back coach - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Valedo – digital back coach published at the 'play' market has multiple vulnerabilities...

Polar Beat - Fitness Coach - Customized SSL, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Polar Beat - Fitness Coach published at the 'play' market has multiple vulnerabilities...

Khan Academy: XSS vulnerability in "/coach/roster/" ( create your first class)

Hi Security Team , Today I found xss vulnerability in "/coach/roster/" create your first class steps : - Go to " Manage students " - click in " create your first class " - create your first class Title name === " - click "create class " Good Fix ,...

Cross site scripting

Cross-site scripting XSS vulnerability in the Coach NG framework in IBM Business Process Manager BPM 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

IBM WebSphere Lombardi Edition 'Coach'脚本html注入漏洞

IBM WebSphere Lombardi Edition是一款业务流程管理解决方案 通过coaches中某些输入控制传递的输入在使用之前缺少过滤，可被利用注入HTML和脚本代码，如果恶意数据被查看时可导致在用户浏览器上执行，可获得敏感信息或劫持用户会话 0 IBM WebSphere Lombardi Edition 7.2 厂商解决方案 IBM ----- 用户可参考如下供应商提供的安全公告获得补丁信息： http://www-01.ibm.com/support/docview.wss?uid=swg1IC79890...