gumtree.com Cross Site Scripting vulnerability OBB-3849379

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in @gumtree/ui-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f495166781b53d4692646ceae552716afa0c80fbc51ff32f0dd98df0fc8081d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-37 Malicious code in @gumtree/ui-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f495166781b53d4692646ceae552716afa0c80fbc51ff32f0dd98df0fc8081d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Gumtree exposed users’ personal and GPS location via source code

By Waqas Gumtree.com or Gumtree is a London, England-based online classified advertisement website with millions of registered users. This is a post from HackRead.com Read the original post: Gumtree exposed users personal and GPS location via source code...

Gumtree – leaking your data and not really listening

Sometimes finding vulnerabilities is as simple as… just looking. TL;DR 1. Gumtree is a UK-based site where users can advertise items for sale. 2. It leaked the PII of sellers to other users of the site within the HTML source of the adverts. Email address, postcode, GPS location, and the seller’s...

gumtree.com XSS vulnerability

Open Bug Bounty ID: OBB-610932 Description| Value ---|--- Affected Website:| gumtree.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

gumtree.sg XSS vulnerability

Vulnerable URL: https://www.gumtree.sg/s-a/v1p1?q=';alert/OPENBUGBOUNTY///';alert//OPENBUGBOUNTY///";a+lert/OPENBUGBOUNTY///";alert/OPENBUGBOUNTY///+alert/OPENBUGBOUNTY/...

gumtree.sg XSS vulnerability

Vulnerable URL: https://www.gumtree.sg/s-a/v1p1?q=';alert/OPENBUGBOUNTY///';alert//OPENBUGBOUNTY///";a+lert/OPENBUGBOUNTY///";alert/OPENBUGBOUNTY///+alert/OPENBUGBOUNTY/...

gumtree.co.za XSS vulnerability

Vulnerable URL: https://www.gumtree.co.za/s-a/v1p1?q=';alert/OPENBUGBOUNTY///';alert//OPENBUGBOUNTY///";a+lert/OPENBUGBOUNTY///";alert/OPENBUGBOUNTY///+alert/OPENBUGBOUNTY/...

gumtree.ie XSS vulnerability

Vulnerable URL: https://www.gumtree.ie/s-a/v1p1?q=';alert/OPENBUGBOUNTY///';alert//OPENBUGBOUNTY///";a+lert/OPENBUGBOUNTY///";alert/OPENBUGBOUNTY///+alert/OPENBUGBOUNTY/...