3 matches found
feed.press XSS vulnerability
Open Bug Bounty ID: OBB-631947 Description| Value ---|--- Affected Website:| feed.press Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
feed.press XSS vulnerability
Open Bug Bounty ID: OBB-605735 Description| Value ---|--- Affected Website:| feed.press Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Slack: Subdomain takeover on podcasts.slack-core.com
I noticed slack-core.com is used for Slack's call infrastructure. I had never seen that domain before, so I decided to find out what else was running on it. It turned out podcasts.slack-core.com was pointing to a Podcast and RSS hosting service called Feed.Press. However, there was no Feed.Press...