Category - API Security Blog

Vulnerability description not...Read More ...

February 27, 2025

shop.temiskamingofficepro.ca Cross Site Scripting vulnerability OBB-4024516

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 27, 2025

valuenews.com Open Redirect vulnerability OBB-4027453

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 27, 2025

fiercetartan.com Cross Site Scripting vulnerability OBB-4027219

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 27, 2025

PortSwigger Web Security: Burp Suite extensions can execute arbitrary code

Vulnerability description not...Read More ...

February 27, 2025

i-map.jp Cross Site Scripting vulnerability OBB-4027581

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 27, 2025

AWS VDP: Amazon Comprehend Medical Service Reporting “AWS Internal” for CloudTrail Events Generated from FIPS Endpoints

The Comprehend Medical service was found to have 8 API endpoints that incorrectly reported the user-agent and network information as "AWS Internal" in CloudTrail event logs. This beh ...

February 27, 2025

Hemi VDP: Linkedin Broken Link Hijacking on https://hemi.xyz/about

The LinkedIn account link for a team member on the https://hemi.xyz/about page pointed to a non-existent LinkedIn...Read More ...

February 27, 2025