Category - API Security Blog

Doppler: WAF bypass and java script incomplete handling of Unicode characters might leads to dom-xss

Vulnerability description not...Read More ...

February 11, 2025

zip2img.com Cross Site Scripting vulnerability OBB-4020009

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 11, 2025

config-door.eu Cross Site Scripting vulnerability OBB-4019116

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 11, 2025

curl: (“possible”) UAF

Vulnerability description not...Read More ...

February 11, 2025

XVIDEOS: Open redirect

Vulnerability description not...Read More ...

February 11, 2025

lifesciencedb.jp Cross Site Scripting vulnerability OBB-4019424

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 11, 2025

tutorialsplane.com Cross Site Scripting vulnerability OBB-4012819

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 11, 2025

XVIDEOS: Unauthenticated API Access Exposing Premium Content and Financial Data

Vulnerability description not...Read More ...

February 11, 2025