crayola.it XSS vulnerability

Open Bug Bounty ID: OBB-458369 Description| Value ---|--- Affected Website:| crayola.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

osteopathie.de XSS vulnerability

Open Bug Bounty ID: OBB-428780 Description| Value ---|--- Affected Website:| osteopathie.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wms-stage.mngt.waikato.ac.nz XSS vulnerability

Open Bug Bounty ID: OBB-409191 Description| Value ---|--- Affected Website:| wms-stage.mngt.waikato.ac.nz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

builders.capgemini.com XSS vulnerability

Open Bug Bounty ID: OBB-390832 Description| Value ---|--- Affected Website:| builders.capgemini.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kb.nuvio.com XSS vulnerability

Open Bug Bounty ID: OBB-388774 Description| Value ---|--- Affected Website:| kb.nuvio.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

moneysavingexpert.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-368656 Description| Value ---|--- Affected Website:| moneysavingexpert.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

www3.lenovo.com XSS vulnerability

Open Bug Bounty ID: OBB-367705 Description| Value ---|--- Affected Website:| www3.lenovo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bankcomm.com.hk XSS vulnerability

Open Bug Bounty ID: OBB-353308 Description| Value ---|--- Affected Website:| bankcomm.com.hk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

codecademy.com XSS vulnerability

Open Bug Bounty ID: OBB-299660 Description| Value ---|--- Affected Website:| codecademy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

uppinghamtowncouncil.gov.uk Open Redirect vulnerability

Open Bug Bounty ID: OBB-296595 Description| Value ---|--- Affected Website:| uppinghamtowncouncil.gov.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

embracewiganandleigh.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-288270 Description| Value ---|--- Affected Website:| embracewiganandleigh.org.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hilti.com.sg XSS vulnerability

Open Bug Bounty ID: OBB-283386 Description| Value ---|--- Affected Website:| hilti.com.sg Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cs1.credistar.com XSS vulnerability

Open Bug Bounty ID: OBB-282415 Description| Value ---|--- Affected Website:| cs1.credistar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

marcustransformer.com XSS vulnerability

Open Bug Bounty ID: OBB-277545 Description| Value ---|--- Affected Website:| marcustransformer.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

descargadictos.club XSS vulnerability

Open Bug Bounty ID: OBB-272488 Description| Value ---|--- Affected Website:| descargadictos.club Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Design/Logic Flaw

Reports executed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute a report they do not have access to. IBM X-Force ID: 126866...

cleverism.com XSS vulnerability

Open Bug Bounty ID: OBB-264633 Description| Value ---|--- Affected Website:| cleverism.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

en.vtex.com XSS vulnerability

Open Bug Bounty ID: OBB-253430 Description| Value ---|--- Affected Website:| en.vtex.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

olandiniimoveis.com.br XSS vulnerability

Open Bug Bounty ID: OBB-250159 Description| Value ---|--- Affected Website:| olandiniimoveis.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

HackerOne: Invitation tokens leak to Google Analytics

Hi, While testing i have noticed that , the hackerone invitation token gets exposed to google-anaytics.com How? Here look at the photo- ████████ We can see that the request payload is exposing the invitation token and its not filtered like this one- ███████ And this is what google does with their...