Report Email Alerts Open Bug Bounty: 113176 coordinated disclosures
Full Disclosure: 32423 vulnerabilities
Total Vulnerabilities Fixed: 38023
120779 vulnerable websites, 12915 VIP websites
2950 security researchers, 3978 notification subscribers

Coordinated Vulnerability Disclosure

On the 20.04.2017 security researcher nomanAli181 Twitter: @nomanAli181
Approved XSS vulnerabilities: 15
Approved XSS vulnerabilities on VIP websites: 1
reported a XSS vulnerability affecting the hadith.net website via the Open Bug Bounty vulnerability disclosure program. We verified the vulnerability and confirmed its existence.

Technical details of the vulnerability are currently hidden ("On Hold") to give website owner time to patch the vulnerability without putting any of its users at risk.

If you are the website owner, administrator or authorized third-party, please contact the researcher directly for vulnerability details and coordinated disclosure.

Important: we never act as intermediary between you and the researcher. It's completely up to you to decide if, and how, to thank the researcher. In some cases a 'thank you' email is enough, in others something more remarkable would be good to recognize his, or her, efforts and time. A recommendation may be a good idea.

Open Bug Bounty ID:

OBB-226096

hadith.net Description

حدیث نت. پایگاه اطلاع رسانی حديث شيعه.

Research's Comment:

OPEN POC URL : http://hadith.net/ResultView.aspx?ws=OPENBUGBOUNTY';alert(searchinfo.ws);// &dm=1&mr=0&st=2


Notification & Disclosure Timeline

20 April, 2017 at 14:16 GMTVulnerability reported via Open Bug Bounty
21 April, 2017 at 05:48 GMTNotification sent to generic security emails
21 April, 2017 at 05:48 GMTVulnerability verified and confirmed

hadith.net Ranking:

Alexa Rank156139
VIP website statusNo
Check hadith.net for malware:Click here
Check hadith.net SSL connection:Click here (Grade: F) Refresh Results

Comments:

Please login via twitter to be the first one to comment.


Latest Vulnerabilities on *.hadith.net

Vulnerability Reported by Type Status Reported on
Open Bug Bounty
On Hold
20.04.2017

Latest Vulnerabilities Reported by nomanAli181

Domain Type Status Reported
Open Bug Bounty
On Hold
27.04.2017
Open Bug Bounty
On Hold
27.04.2017
Open Bug Bounty
On Hold
20.04.2017
Open Bug Bounty
On Hold
20.04.2017
Open Bug Bounty
On Hold
20.04.2017
Open Bug Bounty
On Hold
20.04.2017
Open Bug Bounty
On Hold
20.04.2017
Open Bug Bounty
On Hold
20.04.2017
Open Bug Bounty
On Hold
20.04.2017
Open Bug Bounty
On Hold
20.04.2017
Open Bug Bounty
On Hold
20.04.2017
Open Bug Bounty
On Hold
20.04.2017
Open Bug Bounty
On Hold
20.04.2017
Open Bug Bounty
On Hold
17.04.2017
Open Bug Bounty
On Hold
07.04.2017
Open Bug Bounty
unpatched
28.03.2017

Latest VIP Submissions

casadellibro.com
Reported by Flekyy90 Approved XSS vulnerabilities: 31
Approved XSS vulnerabilities on VIP websites: 2
on 01.05.2017
toysrus.com
Reported by Liam_Somerville Twitter: @LiamMSomerville
Approved XSS vulnerabilities: 74
Approved XSS vulnerabilities on VIP websites: 3
on 30.04.2017
excite.it
Reported by xssbuddy Twitter: @xssbuddy
Approved XSS vulnerabilities: 385
Approved XSS vulnerabilities on VIP websites: 18
on 30.04.2017
thesmartsearch.net
Reported by stacksmash3r Twitter: @stacksmash3r
Approved XSS vulnerabilities: 3
Approved XSS vulnerabilities on VIP websites: 1
on 30.04.2017
tagesspiegel.de
Reported by ThomySec Approved XSS vulnerabilities: 13
Approved XSS vulnerabilities on VIP websites: 7
on 30.04.2017
jiji.ng
Reported by shilewareeq Guest Researcher Profile on 30.04.2017
telenor.no
Reported by M0r3h4x Approved XSS vulnerabilities: 15
Approved XSS vulnerabilities on VIP websites: 2
on 30.04.2017
searchenginejournal.com
Reported by Omegaton Twitter: @Fabio_Rahamim
Approved XSS vulnerabilities: 10
Approved XSS vulnerabilities on VIP websites: 2
on 30.04.2017
ic.gc.ca
Reported by Random_Robbie Twitter: @Random_Robbie
Recommendations received: 12
Approved XSS vulnerabilities: 3247
Approved XSS vulnerabilities on VIP websites: 302
on 30.04.2017
milanoo.com
Reported by Random_Robbie Twitter: @Random_Robbie
Recommendations received: 12
Approved XSS vulnerabilities: 3247
Approved XSS vulnerabilities on VIP websites: 302
on 30.04.2017

Latest Submissions

aleky.cz
Reported by OmniGooch Recommendations received: 3
Approved XSS vulnerabilities: 2880
Approved XSS vulnerabilities on VIP websites: 167
on 01.05.2017
fagsmut.net
Reported by OmniGooch Recommendations received: 3
Approved XSS vulnerabilities: 2880
Approved XSS vulnerabilities on VIP websites: 167
on 01.05.2017
nationalhomebrew.com.au
Reported by OmniGooch Recommendations received: 3
Approved XSS vulnerabilities: 2880
Approved XSS vulnerabilities on VIP websites: 167
on 01.05.2017
zanoonemardoone.ir
Reported by OmniGooch Recommendations received: 3
Approved XSS vulnerabilities: 2880
Approved XSS vulnerabilities on VIP websites: 167
on 01.05.2017
portpropmgt.com
Reported by OmniGooch Recommendations received: 3
Approved XSS vulnerabilities: 2880
Approved XSS vulnerabilities on VIP websites: 167
on 01.05.2017
nst1.capita.co.uk
Reported by Spam404 Twitter: @Spam404Online
Recommendations received: 62
Approved XSS vulnerabilities: 22271
Approved XSS vulnerabilities on VIP websites: 1562
on 01.05.2017
bikeleague.org
Reported by malwrforensics Approved XSS vulnerabilities: 44
Approved XSS vulnerabilities on VIP websites: 5
on 01.05.2017
uf.catalog.fcla.edu
Reported by stacksmash3r Twitter: @stacksmash3r
Approved XSS vulnerabilities: 3
Approved XSS vulnerabilities on VIP websites: 1
on 01.05.2017
e-rudy.com
Reported by malwrforensics Approved XSS vulnerabilities: 44
Approved XSS vulnerabilities on VIP websites: 5
on 01.05.2017
whistl.co.uk
Reported by Spam404 Twitter: @Spam404Online
Recommendations received: 62
Approved XSS vulnerabilities: 22271
Approved XSS vulnerabilities on VIP websites: 1562
on 01.05.2017