sharjah.gov.ae Open Redirect vulnerability

Open Bug Bounty ID: OBB-1145381 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting sharjah.gov.ae website and its users. Following...

OLX: Search Page Reflected XSS on sharjah.dubizzle.com through unencoded output of GET parameter in JavaScript

Hi, I found a reflected XSS vulnerability on the search page of sharjah.dubizzle.com. Because the GET parameter keywords is not being encoded before parsing it into the JavaScript, an attacker can break out of the code an execute JavaScript in the targets browser. Vulnerable Code When searching f...

OLX: XSS and HTML Injection https://sharjah.dubizzle.com/

Hi,Olx Firstly.I saw that dubizzle.com is in your scope so I've decided to report it. PoC: --------------------- 1-Go to that link 2-Login to your dubizzle account,XSS will execute...