fr.auctions.godaddy.com XSS vulnerability

Open Bug Bounty ID: OBB-238403 Description| Value ---|--- Affected Website:| fr.auctions.godaddy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ar.auctions.godaddy.com XSS vulnerability

Open Bug Bounty ID: OBB-238398 Description| Value ---|--- Affected Website:| ar.auctions.godaddy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

br.auctions.godaddy.com XSS vulnerability

Open Bug Bounty ID: OBB-238400 Description| Value ---|--- Affected Website:| br.auctions.godaddy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

id.auctions.godaddy.com XSS vulnerability

Open Bug Bounty ID: OBB-238405 Description| Value ---|--- Affected Website:| id.auctions.godaddy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ca.auctions.godaddy.com XSS vulnerability

Open Bug Bounty ID: OBB-238401 Description| Value ---|--- Affected Website:| ca.auctions.godaddy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cl.auctions.godaddy.com XSS vulnerability

Open Bug Bounty ID: OBB-238402 Description| Value ---|--- Affected Website:| cl.auctions.godaddy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

be.auctions.godaddy.com XSS vulnerability

Open Bug Bounty ID: OBB-238399 Description| Value ---|--- Affected Website:| be.auctions.godaddy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

in.auctions.godaddy.com XSS vulnerability

Open Bug Bounty ID: OBB-238404 Description| Value ---|--- Affected Website:| in.auctions.godaddy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

de.auctions.godaddy.com XSS vulnerability

Open Bug Bounty ID: OBB-238395 Description| Value ---|--- Affected Website:| de.auctions.godaddy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

au.auctions.godaddy.com XSS vulnerability

Open Bug Bounty ID: OBB-238396 Description| Value ---|--- Affected Website:| au.auctions.godaddy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ph.auctions.godaddy.com XSS vulnerability

Open Bug Bounty ID: OBB-238397 Description| Value ---|--- Affected Website:| ph.auctions.godaddy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wsb.godaddy.com XSS vulnerability

Vulnerable URL: http://wsb.godaddy.com/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description...

sso.godaddy.com XSS vulnerability

Open Bug Bounty ID: OBB-224594 Description| Value ---|--- Affected Website:| sso.godaddy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Saying Goodbye to the ShadowBrokers, GoDaddy's Domain Validation Issue, and More

Mike Mimoso and Chris Brook discuss the news of the week, including the ShadowBrokers’ farewell, GoDaddy’s buggy domain validation issue, MongoDB ransoms, and the latest with St. Jude Medical. Show notes: ShadowBrokers Bid Farewell, Close Doors ShadowBrokers Selling Windows Exploits, Attack Tools...

Buggy Domain Validation Forces GoDaddy to Revoke Certs

GoDaddy has revoked, and begun the process of re-issuing, new SSL certificates for more than 6,000 customers after a bug was discovered in the registrar’s domain validation process. The bug was introduced July 29 and impacted fewer than two percent of the certificates GoDaddy issued from that dat...

WordPress GoDaddy Email Marketing Plugin <= 1.1.3 - Cross Site Request Forgery

This plugin is prone to a cross site request forgery vulnerability. Solution Update the plugin...

GoDaddy Email Marketing <= 1.1.3 - Cross-Site Request Forgery (CSRF)

The GoDaddy Email Marketing WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

Snapchat: Incoming email hijacking on sc-cdn.net

Hey guys! Really interesting find here. Summary These dangling MX records on sc-cdn.net have allowed me to purchase an email account with GoDaddy owner of these servers and send/receive email from an account on this domain. sc-cdn.net. 3599 IN MX 0 smtp.secureserver.net. sc-cdn.net. 3599 IN MX 10...

GoDaddy Patches Blind XSS Vulnerability

Domain registrar GoDaddy fixed a vulnerability affecting systems used by its customer support agents that could have been abused to take over, modify or delete accounts. Researcher Matthew Bryant said that a riff on a cross-site scripting attack called a blind XSS was to blame. A GoDaddy customer...

Poisoning the Well &#8211; Compromising GoDaddy Customer Support With Blind XSS

This is the first part of a series of stories of compromising companies via blind cross-site scripting. As companies fix the issues and allow me to disclose them, I will post them here. Blind cross-site scripting XSS is an often-missed class of XSS which occurs when an XSS payload fires in a...