Uncategorized - API Security Blog

XVIDEOS: Error Page Content Spoofing or Text Injection

Vulnerability description not...Read More ...

February 17, 2025

Basecamp: Improper Cache Handling Allows Access to Post-Logout Pages

The report detailed how some browsers' bfcache allowed access to post-logout...Read More ...

February 17, 2025

curl: CVE-2025-0665: eventfd double close

Vulnerability description not...Read More ...

February 17, 2025

espaimacia.cat Cross Site Scripting vulnerability OBB-4015297

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 17, 2025

Top Echelon Software: Clickjacking in main domain https://topechelon.com/

The target website was vulnerable to Clickjacking, a web-based attack that tricked users into interacting with a hidden or disguised iframe. The vulnerability could have been exploited to manipulate u ...

February 17, 2025

XVIDEOS: Open redirect

Vulnerability description not...Read More ...

February 17, 2025

curl: curl allows SSH connection even if host is not in known_hosts

Vulnerability description not...Read More ...

February 17, 2025

coachdd.dek-d.com Cross Site Scripting vulnerability OBB-4020203

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 17, 2025