Uncategorized - API Security Blog

curl: (“possible”) UAF

Vulnerability description not...Read More ...

February 17, 2025

XVIDEOS: Unauthenticated API Access Exposing Premium Content and Financial Data

Vulnerability description not...Read More ...

February 17, 2025

IBM: Weak credentials found in Jenkins endpoint

Weak credentials were discovered in a Jenkins endpoint. The issue was reported to IBM, analyzed, and...Read More ...

February 17, 2025

config-door.eu Cross Site Scripting vulnerability OBB-4019116

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 17, 2025

everymac.com Cross Site Scripting vulnerability OBB-4020305

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 17, 2025

veneziaopera-tickets.eu Cross Site Scripting vulnerability OBB-4019143

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 17, 2025

tuinhier.be Cross Site Scripting vulnerability OBB-4016954

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 17, 2025

XVIDEOS: API Data Leakage Vulnerability Report – `xvcams.com`

Vulnerability description not...Read More ...

February 17, 2025