Ubiquiti Inc.: Stored XSS in unifi.ubnt.com

Dear @ubnt-matt, I've found a stored xss in unifi.ubnt.com Step to reproduce : Step 1: Login to unifi.ubnt.com Step 2: Connect latest unifi controller with unifi.ubnt.com via cloud access. Step 3: Create site with any name in that controller. Step 4: Click on launch site in unifi.ubnt.com then yo...

Ubiquiti Inc.: Open Redirect in unifi.ubnt.com [Controller Finder]

Description : An open redirect is an application that takes a parameter and redirects a user to the parameter value without any validation. This vulnerability is used in phishing attacks to get users to visit malicious sites without realizing it...