Open Bug Bounty Community Forum

tbmnull wrote:

x1admin wrote:

amlnspqr wrote:ibm.com — dom based

amlnspqr wrote:opennet.ru — redirection to a *.openbugbounty.org subdomain

Spam404Online wrote:Recent submissions require a click, thanks

tbmnull wrote:ultimate-guitar.com
billboard.com
b92.net
tombolarcade.co.uk
buyerzone.com

pls

approved

thanks!

what about b92.net ?

already approved

amlnspqr wrote:

x1admin wrote:

amlnspqr wrote:ibm.com — dom based

amlnspqr wrote:opennet.ru — redirection to a *.openbugbounty.org subdomain

Spam404Online wrote:Recent submissions require a click, thanks

tbmnull wrote:ultimate-guitar.com
billboard.com
b92.net
tombolarcade.co.uk
buyerzone.com

pls

approved

Thanks!
https://www.openbugbounty.org/incidents/180411/ — open redirect, not XSS though

fixed

Spam404Online wrote:epsondirect.co.jp
epson.jp

Thanks

approved

amlnspqr wrote:lso.com — press Alt+Shift+X (just wait for the page to load)
investopedia.com — cookie DOM based
fqtag.com — swf

approved

x1admin wrote:

tbmnull wrote:

x1admin wrote: approved

thanks!

what about b92.net ?

already approved

you approved 2nd one, I'm asking for the 1st one

x1admin wrote:

amlnspqr wrote:lso.com — press Alt+Shift+X (just wait for the page to load)
investopedia.com — cookie DOM based
fqtag.com — swf

approved

Thanks!

fqtag.com — another swf one
bcs.whfreeman.com — swf, click the print button
lovecity3d.com — DOM based
custsupport.westernunion.com — DOM based, open the link twice (works fine in latest Chrome)
s3.amazonaws.com — swf
184.107.17.216 — swf (ftp link, still works fine in latest Firefox though)

gamejolt.com

Thanks

Spam404Online wrote:gamejolt.com

Thanks

amlnspqr wrote:

x1admin wrote:

amlnspqr wrote:lso.com — press Alt+Shift+X (just wait for the page to load)
investopedia.com — cookie DOM based
fqtag.com — swf

approved

Thanks!

fqtag.com — another swf one
bcs.whfreeman.com — swf, click the print button
lovecity3d.com — DOM based
custsupport.westernunion.com — DOM based, open the link twice (works fine in latest Chrome)
s3.amazonaws.com — swf
184.107.17.216 — swf (ftp link, still works fine in latest Firefox though)

approved

x1admin wrote: approved

Appreciate it, thank you!

Here's more that require manual approval -
justaskgemalto.com
trusted-labs.com

Spam404Online wrote:

x1admin wrote: approved

Appreciate it, thank you!

Here's more that require manual approval -
justaskgemalto.com
trusted-labs.com

approved