Category - API Security Blog

189.113.4.6 Improper Access Control vulnerability OBB-2634525

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

May 31, 2022

(RHSA-2022:4814) Moderate: Migration Toolkit for Containers (MTC) 1.6.5 security and bug fix update

The Migration Toolkit for Containers (MTC) enables you to migrate Kubernetes resources, persistent volume data, and internal container images between OpenShift Container Platform clusters, using the M ...

May 31, 2022

alltours.ch Cross Site Scripting vulnerability OBB-2634517

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

May 31, 2022

alltours.nl Cross Site Scripting vulnerability OBB-2634516

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

May 31, 2022

plein.com Cross Site Scripting vulnerability OBB-2634515

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

May 31, 2022

RST Threat feed. IOC: https://yacotch.com/api/abp.castle.log4net.dll

Found **https://yacotch[.]com/api/abp.castle.log4net.dll** in [...Read More ...

May 31, 2022

RST Threat feed. IOC: https://yacotch.com/api/abp.entityframework.common.dll

Found **https://yacotch[.]com/api/abp.entityframework.common.dll...Read More ...

May 31, 2022

RST Threat feed. IOC: api.opticalinput.com

Found **api[.]opticalinput.com** in [RST Threat Feed](https://r...Read More ...