Uncategorized - API Security Blog

thefreedictionary.com Cross Site Scripting vulnerability OBB-4017737

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 20, 2025

Yelp: Unauthorized Reservation Cancellation Through IDOR Vulnerability

Vulnerability description not...Read More ...

February 20, 2025

Basecamp: Improper Cache Handling Allows Access to Post-Logout Pages

The report detailed how some browsers' bfcache allowed access to post-logout...Read More ...

February 20, 2025

XVIDEOS: Unauthenticated API Access Exposing Premium Content and Financial Data

Vulnerability description not...Read More ...

February 20, 2025

curl: CVE-2025-0665: eventfd double close

Vulnerability description not...Read More ...

February 20, 2025

maultalk.com Open Redirect vulnerability OBB-4019454

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 20, 2025

cube-store-ulm.de Cross Site Scripting vulnerability OBB-4019012

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 20, 2025

awbw.amarriner.com Cross Site Scripting vulnerability OBB-4017729

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 20, 2025