29 matches found
moodle.windsor-forest.ac.uk Cross Site Scripting vulnerability OBB-2279863
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Talos Takes Ep: #63: Shield your eyes from the Solarmarker
By Jon Munshaw. The latest episode of Talos Takes is available now. Download this episode and subscribe to Talos Takes using the buttons below, or visit the Talos Takes page. Andrew Windsor has been following the Solarmarker threat for months. But it really started to catch his eye when he... Thi...
windsor-ct.granicus.com Cross Site Scripting vulnerability OBB-1245657
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
windsorplywood.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1140838 Security Researcher g0bl1nsec Helped patch 3754 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting windsorplywood.com websit...
windsorbrass.co.nz XSS vulnerability
Open Bug Bounty ID: OBB-668706 Description| Value ---|--- Affected Website:| windsorbrass.co.nz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
windsor.ctvnews.ca XSS vulnerability
Vulnerable URL: http://windsor.ctvnews.ca/video/'"--! Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check windsor.ctvnews.ca SSL connection:| Grade: B Coordinate...
Shopify: https://windsor.shopify.com/ takeover
Hi Shopify, So I was doing some scanning for another client and saw a ton of .shopify.com appear and thought to myself "Huh? I thought shopify.com hosted shops on myshopify.com.. weird, lets check this out". An example is this: http://khanbot.shopify.com/password - as you can see it's a store...
windsor.gov.uk XSS vulnerability
Vulnerable URL: http://www.windsor.gov.uk/site-search-results?postbackctrlkey=1436814368=%22%3E%3Csvg%2Fonload%3Dconfirm%28%27XSSPOSED%27%29%3E&submit.x;=0&submit.y;=0 Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:27 GMT Vulnerability type...