hi.minnuoindustry.com Cross Site Scripting vulnerability OBB-2591963

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fun.abadzhiev.com Cross Site Scripting vulnerability OBB-2591771

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Reflected XSS

Description hello team, i found a reflected xss in /rtxcomplete/nodeslike via callback parameter Proof of Concept https://arax.rtx.ai/rtxcomplete/nodeslike?=1651210002052&callback=%3CScRiPt%20%3Ealertdocument.domain%3C/ScRiPt%3E&limit=15&word=1...

hi.dgtlight.com Cross Site Scripting vulnerability OBB-2568797

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

villageconnector.mobiclients.net Cross Site Scripting vulnerability OBB-2566206

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

apotekernes.webproof4.com Cross Site Scripting vulnerability OBB-2561676

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

OWASP ESAPI 安全漏洞

OWASP ESAPI is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications. cross-site scripting vulnerabilities exist in versions of OWASP ESAPI prior to 2.3.0.0, which originate from the " onsiteURL" regular expression erro...

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in actionview...

ecso.organon-officeweb.be Cross Site Scripting vulnerability OBB-2559918

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-27428

CVE-2022-27428 is a stored XSS in GalleryCMS v2.0, exploited via the album_name parameter in /index.php/album/add. The vulnerability arises from lack of input validation/escaping, allowing arbitrary web scripts when a crafted payload is submitted. Documents consistently describe the impact as cli...

ssl.web4u.cz Cross Site Scripting vulnerability OBB-2553231

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

basketball.providencesportsri.com Cross Site Scripting vulnerability OBB-2546059

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-38903

CVE-2021-38903 concerns IBM Cognos Analytics (versions 11.2.x and 11.1.x). The vulnerability is a cross-site scripting flaw caused by improper validation of user-supplied input in the web interface, enabling a remote attacker to inject script into a user’s browser session and potentially steal co...

laurelpedsmd.com Cross Site Scripting vulnerability OBB-2537558

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

chatwoot 跨站脚本漏洞

chatwoot is an application. Customer engagement suite, an open source alternative to intercom, Zendesk, Salesforce Service Cloud, etc. chatwoot suffers from a cross-site scripting vulnerability that stems from the program's lack of data validation filtering of user-supplied data and output. An...

minidoctor.webwiders.in Cross Site Scripting vulnerability OBB-2525646

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PYSEC-2022-43167

Selenium Server Grid before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain...

The vulnerability in the web interface for controlling the Cisco AsyncOS operating system of Cisco Web Security Appliance allows a perpetrator to execute cross-site scripting attacks.

The vulnerability in the web interface for controlling the Cisco AsyncOS operating system of Cisco Web Security Appliance lies in the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Delta Controls enteliTOUCH 3.40.3935 - Cross-Site Request Forgery (CSRF)

Exploit Tile: Delta Controls enteliTOUCH 3.40.3935 - Cross-Site Request Forgery CSRF Exploit Author: LiquidWorm enteliTouch CSRF CSRF Add User:...

cloud.qxuanyun.com Cross Site Scripting vulnerability OBB-2517009

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...