residence-du-leman.ch Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1935 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting residence-du-leman.ch website and its users. Followin...

gsc.uri.edu Improper Access Control vulnerability

Security Researcher geeknik Helped patch 8594 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting gsc.uri.edu website and its users. Following coordinated a...

ericsonsaether.se Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-870284 Security Researcher CoderYounes Helped patch 1033 vulnerabilities Received 5 Coordinated Disclosure badges Received 8 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting ericsonsaether.se websit...

budoskop.pl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-869342 Security Researcher Hchabik Helped patch 2358 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting budoskop.pl website and its...

muisjesensitief.nl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-863949 Security Researcher Implosion Helped patch 1643 vulnerabilities Received 7 Coordinated Disclosure badges Received 29 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting muisjesensitief.nl websit...

login.puikenduin.nl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-862389 Security Researcher Implosion Helped patch 1643 vulnerabilities Received 7 Coordinated Disclosure badges Received 29 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting login.puikenduin.nl websi...

Cisco Security Manager XML Entity Expansion Vulnerability

A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive information or cause a denial of service DoS condition. The vulnerability is due to improper restrictions on XML entities. An attacker could exploit this vulnerability by sending maliciou...

fetcheveryone.co.uk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-861823 Security Researcher Sameull Helped patch 268 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting fetcheveryone.co.uk website and its users. Following...

it-media.dsautomobiles.com Cross Site Scripting vulnerability

Security Researcher edoardovignati Helped patch 183 vulnerabilities Received 3 Coordinated Disclosure badges Received 7 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting it-media.dsautomobiles.com website and its users...

baidu8.art Cross Site Scripting vulnerability

Security Researcher analogmind Helped patch 37 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting baidu8.art website and its users. Following coordinated and responsible vulnerability...

horg.com.tr Cross Site Scripting vulnerability

Security Researcher CoderYounes Helped patch 1033 vulnerabilities Received 5 Coordinated Disclosure badges Received 8 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting horg.com.tr website and its users. Following coordinate...

imoveisamistad.com.br Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-850869 Security Researcher Gh05tPT Helped patch 6873 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting imoveisamistad.com.br...

fairfieldassoc.com Cross Site Scripting vulnerability

Security Researcher KhanJanny Helped patch 2643 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting fairfieldassoc.com website and its users. Following...

fldoe.org Improper Access Control vulnerability

Open Bug Bounty ID: OBB-849934 Security Researcher ANS Helped patch 452 vulnerabilities Received 8 Coordinated Disclosure badges Received 31 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting fldoe.org website and its users...

fast2sms.com Cross Site Scripting vulnerability

Security Researcher RupeshDubey Helped patch 1 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting fast2sms.com website and its users. Following coordinated and responsible vulnerabili...

CVE-2018-17169

An XML external entity XXE vulnerability in PrinterOn version 4.1.4 and lower allows remote authenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request...

F5 Networks BIG-IP : XML vulnerability (K03244804)

XML External Entity vulnerability in libexpat 2.2.0 and earlier Expat XML Parser Library allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD. CVE-2017-9233 Impact BIG-IP Administrative interfaces, such as iControl SOAP, are...

CVE-2017-11428

CVE-2017-11428 affects OneLogin Ruby-SAML up to version 1.6.0. The issue arises from improper use of XML DOM traversal and canonicalization results, allowing manipulation of SAML data without breaking the cryptographic signature and potentially bypassing authentication to SAML service providers. ...

CVE-2017-18111

The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before version 5.1.3, and from version 5.2.0 before version 5.2.6 used an XML document builder that was vulnerable to XXE when consuming a client OAuth request. This allowed malicious oauth application linked...

xe.gr Cross Site Scripting vulnerability OBB-775616

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| xe.gr ---|--- Open Bug Bounty Program:|...