Browse / OWOX, Inc.

OWOX, Inc.

See its reports on the map

What gets reported to OWOX, Inc.

• Authentication5
• Cross-site Scripting3
• Misconfiguration2
• Information Disclosure2
• Other weaknesses1
• Code Execution1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Reflected XSS Cross-site Scripting (XSS) - Reflected · high
   20 votes
2. Server-side cache poisoning leads to the http://my.dev.owox.com inaccessibilityhigh
   18 votes
3. Session is not expire after logoutImproper Authentication - Generic · medium
   17 votes
4. Broken Authentication & Session Management (Login Bypass) at support.owox.comImproper Authentication - Generic · critical
   17 votes
5. Stored XSS at https://finance.owox.com/customer/accountListCross-site Scripting (XSS) - Generic · low
   16 votes
6. Unrestricted File Upload in Chat WindowViolation of Secure Design Principles · medium
   13 votes
7. HTTP Response Splitting(CRLF injection) in bi.owox.comCommand Injection - Generic
   13 votes
8. Access to Grafana DashboardInformation Disclosure · medium
   12 votes
9. Subdomain Takeover on http://kiosk.owox.com/Improper Authentication - Generic · critical
   12 votes
10. Subdomain takeover in many subdomainsPrivilege Escalation · critical
    9 votes
11. The URL in "Choose a data source'' at "https://bi.owox.com/ui/settings/connected-services/setup/" is not filtered => reflected XSS.Cross-site Scripting (XSS) - Reflected · high
    8 votes
12. Direct IP AccessN/AInformation Disclosure · low
    4 votes
13. Subdomain Takeover on OWOX.RUDuplicateImproper Authentication - Generic · critical
    2 votes
14. Subdomain Takeover on http://blog.owox.com/InformativeImproper Authentication - Generic · critical
    2 votes
15. invalid URL parsing with and '@'N/AHTTP Response Splitting · low
    2 votes
16. ClickJackingDuplicateUI Redressing (Clickjacking)
    1 votes