gestiopenyes.fcbarcelona.cat Cross Site Scripting vulnerability OBB-3456257

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

FC Barcelona Suffers Likely Credential-Stuffing Attack on Twitter

Just ahead of its Champion’s League Round of 16 appearance next week, FC Barcelona’s official Twitter account was hacked in an apparent credential-stuffing attack. The strike resulted in account takeover and bogus tweets being sent out. The hacking collective known as OurMine, which made headline...

fcbarcelona.com XSS vulnerability

Vulnerable URL: https://www.fcbarcelona.com/search?keywords=%3C/title%3E%3C/script/%22-alert0-%22--%3E%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E=i:aps,k:%3C/title%3E%3C/script/%22-alert0-%22-%20-%3E%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, a...

FC Barcelona Official App - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application FC Barcelona Official App published at the 'play' market has multiple vulnerabilities...

FC Barcelona Official Keyboard - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application FC Barcelona Official Keyboard published at the 'play' market has multiple vulnerabilities...