Category - API Security Blog

concreto-premezclado.net Cross Site Scripting vulnerability OBB-3081462

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

December 01, 2022

constructif.net Cross Site Scripting vulnerability OBB-3081471

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

December 01, 2022

oliversciderandperry.co.uk Cross Site Scripting vulnerability OBB-3081477

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

December 01, 2022

newportarchive.co.uk Cross Site Scripting vulnerability OBB-3081480

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

December 01, 2022

newlooktravel.co.uk Cross Site Scripting vulnerability OBB-3081517

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

December 01, 2022

klipschspeakers.net Cross Site Scripting vulnerability OBB-3081528

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

December 01, 2022

DomainDouche – OSINT Tool to Abuse SecurityTrails Domain Suggestion API To Find Potentially Related Domains By Keyword And Brute Force

[![](https://blogger.googleusercontent.com/img/a/AVvXsEgad_q4Q6z9A-opQWg-i2Ajz_TAp3zBKQexPEB_cqcjQE-nRK0qOGMPY5SkLAET2nl84YKocw1DUbtjnYpgJKSXQUEzwHZi75YvGO1pXDU5CNtL2dQRlvXO3DwrB3oWv8wX6OWYaqcEZnYU7qG ...

December 01, 2022

CVE-2022-36431

An arbitrary file upload vulnerability in Rocket TRUfusion Enterprise before 7.9.6.1 allows unauthenticated attackers to execute arbitrary code via a crafted JSP file. Issue fixed in version 7.9.6.1.R ...

December 01, 2022