programiz.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1137346 Security Researcher shubhu1994sep Helped patch 3 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting programiz.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of th...

vodoley2010.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1136348 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

HCL Technologies AppScan Standard Edition XXE Vulnerability

HCL Technologies AppScan Standard Edition is a suite of dynamic analysis testing tools from HCL Technologies, India, which is primarily used for web security testing. HCL Technologies AppScan Standard Edition suffers from an XXE vulnerability. An attacker can exploit this vulnerability to disclos...

Unspecified Vulnerability in HCL Technologies AppScan Standard Edition

HCL Technologies AppScan Standard Edition is a suite of dynamic analysis testing tools from HCL Technologies, India, which is primarily used for web security testing. HCL Technologies AppScan Standard Edition suffers from an unspecified vulnerability that stems from an incorrect account lockout...

CVE-2015-9545

The CVE-2015-9545 issue affects xdLocalStorage up to version 2.0.5, where receiveMessage() in xdLocalStorage.js does not validate the origin of web messages. This missing origin validation can allow remote attackers to entice a user to load a malicious site and exploit web messages to affect the ...

guitarlessons-atlanta.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1135450 Security Researcher geeknik Helped patch 8887 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting guitarlessons-atlanta.com...

supersoluce.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1135194 Security Researcher ELProfesor Helped patch 2791 vulnerabilities Received 8 Coordinated Disclosure badges Received 106 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting supersoluce.com websit...

errenteria.eus Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1134923 Security Researcher 4NCURZE Helped patch 1412 vulnerabilities Received 7 Coordinated Disclosure badges Received 12 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting errenteria.eus website and...

manchester.ac.uk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1134919 Security Researcher 4NCURZE Helped patch 1412 vulnerabilities Received 7 Coordinated Disclosure badges Received 12 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting manchester.ac.uk website a...

braillebookstore.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1133663 Security Researcher ELProfesor Helped patch 2791 vulnerabilities Received 8 Coordinated Disclosure badges Received 106 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting braillebookstore.com...

mgts.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1133328 Security Researcher Rbcafe Helped patch 258 vulnerabilities Received 3 Coordinated Disclosure badges Received 7 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting mgts.ru website and its users...

Command Injection

Overview jscover is a node wrap for JSCover. Affected versions of this package are vulnerable to Command Injection. The source argument can be controlled by users without any sanitization. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicio...

Design/Logic Flaw

There is an Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in php webpages of Tiki-Wiki Groupware. Tiki-Wiki CMS all versions through 20.0 allows malicious users to cause the injection of malicious code fragments scripts into a legitimate web page...

333960.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1130780 Security Researcher geeknik Helped patch 8908 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting 333960.ru website and its...

vulhub

This repository is an open-source collection of pre-built vulnerable docker environments. It is an offensive tool for web application security testing. The primary vulnerability class/vector targeted by this repository is Server-Side Template Injection SSTI, specifically in Flask applications. Th...

WeiPHP has an XSS vulnerability

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. WeiPHP has an XSS vulnerability. An attacker can exploit this vulnerability to execute malicious scripts and obtain administrator cookies...

hireitpeople.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1128359 Security Researcher mominroaim Helped patch 64 vulnerabilities Received 2 Coordinated Disclosure badges Received 5 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting hireitpeople.com website a...

worldfest.org Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1127415 Security Researcher g0bl1nsec Helped patch 3741 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting worldfest.org website and...

QCMS is vulnerable to XSS

QCMS website management system is a PHP lightweight system developed through MVC architecture. An XSS vulnerability exists in the QCMS backend, which can be exploited by attackers to obtain user login credentials...

hrsk.hr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1126455 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting hrsk.hr website and its...