p-nintendo.com Cross Site Scripting vulnerability OBB-2627700

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

p-nintendo.com XSS vulnerability

Open Bug Bounty ID: OBB-683530 Description| Value ---|--- Affected Website:| p-nintendo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

p-nintendo.com XSS vulnerability

Open Bug Bounty ID: OBB-634059 Description| Value ---|--- Affected Website:| p-nintendo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

p-nintendo.com XSS vulnerability

Open Bug Bounty ID: OBB-610367 Description| Value ---|--- Affected Website:| p-nintendo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nintendo.com XSS vulnerability

Open Bug Bounty ID: OBB-553492 Description| Value ---|--- Affected Website:| nintendo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

p-nintendo.com XSS vulnerability

Open Bug Bounty ID: OBB-451607 Description| Value ---|--- Affected Website:| p-nintendo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nintendo.com XSS vulnerability

Vulnerable URL: http://www.nintendo.com/consumer/gameslist/gamesplayableinfrench.jsp?system=%3C/SCript%3E%3CsvG/onLoad=alert%28%22OPENBUGBOUNTY%22%29%3E Details: Description| Value ---|--- Patched:| Yes, at 31.10.2017 Latest check for patch:| 31.10.2017 06:32 GMT Vulnerability type:| XSS...

Nintendo 3DS DNS Client Resolver Predictable TXID

Nintendo: 3DS DNS Client Resolver Library Uses Predictable TXID I bought a New Nintendo 3DS XL US with firmware 11.2.0-35U, and I've noticed that that DNS client resolved on the 3DS uses a simple incrementing TXID for lookups. This does not provide enough entropy to prevent remote attackers from...