Malicious code in vinted-mocked-apis (PyPI)

Source: kam193 c71ab868e2ac254cfa135aa73c1ed19a3ddb1c82793efa3ff8466c3c5aa44b02 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

Malicious Package

Overview vinted-mocked-apis is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

vinted.lu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-976587 Security Researcher Hchabik Helped patch 2467 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting vinted.lu website and its...

vinted.com XSS vulnerability

Vulnerable URL: https://www.vinted.com/clothes?searchtext=%22%3E%3Cimg%20src%3D%22x%22%20onerror%3Djavascript%3Aalert%22openbugbounty%22%3B%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...