nytimes.stats.com Cross Site Scripting vulnerability OBB-3199695

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tucson15.nytimes-institute.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1135765 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

myaccount.nytimes.com XSS vulnerability

Vulnerable URL: https://myaccount.nytimes.com/auth/login Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:47 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

realestate.nytimes.com XSS vulnerability

Vulnerable URL: http://realestate.nytimes.com/community/marketsnapshot.aspx?e=";alert'OPENBUGBOUNTY';// Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

nytimes.com XSS vulnerability

Vulnerable URL: http://www.nytimes.com/times-journeys/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 08.05.2017 Latest check for patch:| 08.05.2017 02:44 GMT Vulnerability type:| XSS Vulnerability status:...

nocera.blogs.nytimes.com XSS vulnerability

Vulnerable URL: http://nocera.blogs.nytimes.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

parenting.blogs.nytimes.com XSS vulnerability

Vulnerable URL: http://parenting.blogs.nytimes.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

atwar.blogs.nytimes.com XSS vulnerability

Vulnerable URL: http://atwar.blogs.nytimes.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

india.blogs.nytimes.com XSS vulnerability

Vulnerable URL: http://india.blogs.nytimes.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

learning.blogs.nytimes.com XSS vulnerability

Vulnerable URL: http://learning.blogs.nytimes.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

lens.blogs.nytimes.com XSS vulnerability

Vulnerable URL: http://lens.blogs.nytimes.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

jobs.nytimes.com XSS vulnerability

Vulnerable URL: http://jobs.nytimes.com/Jobs/q--lt--or-title-gt-----quat--lt--or-script-gt--lt-script-gt-alert'XSSPOSED'-lt--or-script-gt--lt--or-title-gt--l-New%20York%2C%20NY?source=1=3=20 Details: Description| Value ---|--- Patched:| Yes, at 25.03.2016 Latest check for patch:| 25.03.2016 19:23...

GitHub hit by Massive DDoS Attack From China

Github – a popular coding website used by programmers to collaborate on software development – was hit by a large-scale distributed denial of service DDoS attack for more than 24 hours late Thursday night. It seems like when users from outside countries visit different websites on the Internet th...

New York Times Cross Site Scripting

New York Times nytimes.com Page Design XSS Vulnerability Almost all Article Pages Before 2013 are Affected Domain: http://www.nytimes.com/ Vulnerability Description: The vulnerability occurs at New York Times’s URLs. Nytimes short for New York Times uses part of the URLs to construct its pages...