Category - API Security Blog

Hemi VDP: Linkedin Broken Link Hijacking on https://hemi.xyz/about

The LinkedIn account link for a team member on the https://hemi.xyz/about page pointed to a non-existent LinkedIn...Read More ...

February 27, 2025

XVIDEOS: Error Page Content Spoofing or Text Injection

Vulnerability description not...Read More ...

February 27, 2025

ipt.inpa.gov.br Cross Site Scripting vulnerability OBB-4027572

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 27, 2025

hindishaadi.com Cross Site Scripting vulnerability OBB-4030703

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 27, 2025

decembergirl.net Cross Site Scripting vulnerability OBB-4027589

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 27, 2025

tagankateatr.ru Cross Site Scripting vulnerability OBB-4030669

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 27, 2025

XVIDEOS: Unauthenticated API Access Exposing Premium Content and Financial Data

Vulnerability description not...Read More ...

February 27, 2025

punjabishaadi.com Cross Site Scripting vulnerability OBB-4030693

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 27, 2025