Uncategorized - API Security Blog

XVIDEOS: Error Page Content Spoofing or Text Injection

Vulnerability description not...Read More ...

February 26, 2025

AWS VDP: Amazon Comprehend Medical Service Reporting “AWS Internal” for CloudTrail Events Generated from FIPS Endpoints

The Comprehend Medical service was found to have 8 API endpoints that incorrectly reported the user-agent and network information as "AWS Internal" in CloudTrail event logs. This beh ...

February 26, 2025

curl: Format string vulnerability, curl_msnprintf() function

Vulnerability description not...Read More ...

February 26, 2025

zip2img.com Cross Site Scripting vulnerability OBB-4020009

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 26, 2025

jc-motor.com.tw Cross Site Scripting vulnerability OBB-4027582

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 26, 2025

mike.it-loops.com Cross Site Scripting vulnerability OBB-4027573

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 26, 2025

dix-immobilien.de Cross Site Scripting vulnerability OBB-4027574

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 26, 2025

curl: (“possible”) UAF

Vulnerability description not...Read More ...

February 26, 2025