xnxx.com XSS vulnerability

Open Bug Bounty ID: OBB-645901 Description| Value ---|--- Affected Website:| xnxx.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

zoo-xnxx.com XSS vulnerability

Open Bug Bounty ID: OBB-512106 Description| Value ---|--- Affected Website:| zoo-xnxx.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosur...

Legal Robot: Header Injection In app.legalrobot.com

As per policy header injection are low priority bug but i recently discovered that when attacker change host to a special domain then victim will be redirect there.... My Request : GET /sign-in HTTP/1.1 Host: app.legalrobot.com User-Agent: Mozilla/5.0 X11; Linux x8664; rv:52.0 Gecko/20100101...