missionbayinnsandiego.com Improper Access Control vulnerability OBB-3805044

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sandiegoseofirm.net Cross Site Scripting vulnerability OBB-3115720

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

U.S. Dept Of Defense: XSS in ServiceNow logout https://████:443

An XSS vulnerability was discovered in ServiceNow logout, allowing an unauthenticated remote attacker to execute code in the user's browser context by clicking on a malicious link. The vulnerability was present in ServiceNow versions prior to SanDiego SP6 and has been assigned CVE-2022-38463...

PT-2022-24257 · Servicenow · Servicenow

Name of the Vulnerable Software and Affected Versions: ServiceNow versions through San Diego Patch 3 Description: The issue allows for XSS via the name field during the creation of a new dashboard for the Performance Analytics dashboard. Recommendations: For versions through San Diego Patch 3,...

sandiegolawlibraryfoundation.org Improper Access Control vulnerability OBB-2254201

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sandiegobridgeacademy.com XSS vulnerability

Open Bug Bounty ID: OBB-620584 Description| Value ---|--- Affected Website:| sandiegobridgeacademy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sandiego.gov XSS vulnerability

Vulnerable URL: https://www.sandiego.gov/sites/default/files/legacy/coo/2016highlights/bookContent.swf?currentHTMLURL=data:text/html;base64,PHNjcmlwdD5hbGVydCgnT1BFTiBCVUdCT1VOVFknKTwvc2NyaXB0Pg==&cfwaftk=042437002UjFXxFQ2VsadXjZGy4EHwOwvPBs Details: Description| Value ---|--- Patched:| No Latest...