Category - API Security Blog

mirrors.vijaymalav6969.workers.dev Cross Site Scripting vulnerability OBB-3188853

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

February 10, 2023

dl.aswinas.workers.dev Cross Site Scripting vulnerability OBB-3188855

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

February 10, 2023

gdrive.alihasan.workers.dev Cross Site Scripting vulnerability OBB-3188856

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

February 10, 2023

cmbalsas.ma.gov.br Cross Site Scripting vulnerability OBB-3188871

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

February 10, 2023

robert-limpert.de Cross Site Scripting vulnerability OBB-3188875

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

February 10, 2023

mil.in.ua Cross Site Scripting vulnerability OBB-3188878

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

February 10, 2023

Leaktopus – Keep Your Source Code Under Control

[![](https://blogger.googleusercontent.com/img/a/AVvXsEjwepVjOYic17vJd7-z6Dxa-PuoPvndyFPkIPiWIrYS5bwapyZQMrmQdBaGNywphCTrmgaLp06COgw8Tcl6XtWYgaY0lOFTqUMTKmHGwig5BTb_3JAyBFcoCg03EcGya4MRuFU0HoQNz_HiE4J ...

February 10, 2023

EXNESS: Double forward slash breaks server-side restrictions & allows access to prohibited services from a partner account

Hi Team, There appears to be a weird bug here. Making an API call to the prohibited endpoint appended with double/multiple slash is breaking some server-side restrictions imposed upon a partner accoun ...

February 10, 2023