20626 matches found
Open-Xchange: [XSS] Forgot password link
Hi. 1. Go to without autologin: https://sandbox.open-xchange.com/appsuite/!!&forgot-password=javascript:alert1 2. Click: Forgot your password? No check parameter forgot-password in /apps/io.ox/core/boot/form.js: js function n $"io-ox-password-forget-form".remove; var a = .url.hash"forgot-password...
whisqy.com XSS vulnerability
Open Bug Bounty ID: OBB-601390 Description| Value ---|--- Affected Website:| whisqy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Mail.ru: CRLF injection mcs.mail.ru (leads to XSS)
Description: Я репортил уязвимость open redirect 335521 , которая позволяет украсть токены админа для входа. В redirecturi присутствует crlf инъекция. Даже если вы исправите репорт 335521 , то crlf injection всё равно будет существовать, потому что валидация url для редиректа не повлияет на эту...
Passit: CSV-injection in export functionality
Summary: CSV-injection in export functionality Description: Hello team! I have found that you have a CSV-injection vulnerability in export functionality. First I thought that this is just fine but because you can group up this can be used against another users which makes this pretty critical...
LocalTapiola: DoS of www.lahitapiolarahoitus.fi via CVE-2018-6389 exploitation
Description There is possibility in /wp-admin/load-scripts.php script to generate large 3Mb amount of data via simple non-authenticated request to server. The vulnerability is registered as https://vulners.com/cve/CVE-2018-6389 Details Detailed attack scenario is described for example here:...
mikesmithkia.com XSS vulnerability
Open Bug Bounty ID: OBB-599548 Description| Value ---|--- Affected Website:| mikesmithkia.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
pixies.cz XSS vulnerability
Open Bug Bounty ID: OBB-599480 Description| Value ---|--- Affected Website:| pixies.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
unionleader.com XSS vulnerability
Open Bug Bounty ID: OBB-599175 Description| Value ---|--- Affected Website:| unionleader.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
knivesandtools.de XSS vulnerability
Open Bug Bounty ID: OBB-599102 Description| Value ---|--- Affected Website:| knivesandtools.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
VK.com: Reflected XSS в /al_audio.php
XSS в аудио. XSS в прикреплении аудиозаписи в виджете комментариев...
bingofunhouse.com XSS vulnerability
Open Bug Bounty ID: OBB-598989 Description| Value ---|--- Affected Website:| bingofunhouse.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
rasur-online.de XSS vulnerability
Open Bug Bounty ID: OBB-598843 Description| Value ---|--- Affected Website:| rasur-online.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
datacentermap.com XSS vulnerability
Open Bug Bounty ID: OBB-598329 Description| Value ---|--- Affected Website:| datacentermap.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
cnc.org.br XSS vulnerability
Open Bug Bounty ID: OBB-597863 Description| Value ---|--- Affected Website:| cnc.org.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
kksk.org XSS vulnerability
Open Bug Bounty ID: OBB-597287 Description| Value ---|--- Affected Website:| kksk.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
salzburger-kunstverein.at XSS vulnerability
Open Bug Bounty ID: OBB-597272 Description| Value ---|--- Affected Website:| salzburger-kunstverein.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
npc.inra.fr XSS vulnerability
Open Bug Bounty ID: OBB-597176 Description| Value ---|--- Affected Website:| npc.inra.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Mail.ru: [dl.beepcar.ru] CRLF Injection
CRLF Injection via Get request PoC: https://dl.beepcar.ru/qwerty%0ASet-Cookie:%20test=qwerty;domain=.beepcar.ru HTTP Response: HTTP/1.1 302 Moved Temporarily Server: nginx/1.12.2 Date: Tue, 03 Apr 2018 19:20:31 GMT Content-Type: text/html Content-Length: 161 Connection: close Location:...
mersinisrehberi.com XSS vulnerability
Open Bug Bounty ID: OBB-596188 Description| Value ---|--- Affected Website:| mersinisrehberi.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...