Mail.ru: XSS on e.mail.ru via postMessage

URI Get parameters based XSS in https://e.mail.ru/cgi-bin/login via combination of factors controllable script name via NUL characters inection, availability of script with known vulnerability within domain...

benamusements.com XSS vulnerability

On the 02.01.2018 security researcher reported a XSS vulnerability affecting the benamusements.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 2 January, 2018...

ownCloud: OS Command Injection via tainted PATH environment variable in findBinaryPath

The PATH environment variable is passed to the find command in owncloud/core/blob/master/lib/private/legacy/helper.php on line 543 is not sanitized for input. If an adversary is able to taint the PATH environment variable, OS command execution is possible utilizing the find command's execute -exe...

instabut.com XSS vulnerability

Open Bug Bounty ID: OBB-478012 Description| Value ---|--- Affected Website:| instabut.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based ...

essaygifts.co.za XSS vulnerability

Open Bug Bounty ID: OBB-472650 Description| Value ---|--- Affected Website:| essaygifts.co.za Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

VK.com: CSRF на установку своей почты к аккаунту.

CSRF при привязке почты к странице. ВНИМАНИЕ ВКОНТАКТЕ КИНУЛИ МЕНЯ НА ВЫПЛАТУ И СКАЗАЛИ ЧТО Я ЭКСПЛУАТИРОВАЛ!! КОГДА Я ПОПРОСИЛ ДОКАЗАТЬ ЭТО ОНИ ЗАИГНОРИЛИ И ПРУФОВ С ИХ СТОРОНЫ НЕ ПОСЛЕДОВАЛО...

cabincrew.bri.co.id XSS vulnerability

Open Bug Bounty ID: OBB-472487 Description| Value ---|--- Affected Website:| cabincrew.bri.co.id Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

flugzeugbilder.de XSS vulnerability

Open Bug Bounty ID: OBB-472241 Description| Value ---|--- Affected Website:| flugzeugbilder.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

juarezmyrian.com XSS vulnerability

Open Bug Bounty ID: OBB-470266 Description| Value ---|--- Affected Website:| juarezmyrian.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

iceasaminas.org.br XSS vulnerability

Open Bug Bounty ID: OBB-470254 Description| Value ---|--- Affected Website:| iceasaminas.org.br Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

americanvalues.org XSS vulnerability

Open Bug Bounty ID: OBB-470182 Description| Value ---|--- Affected Website:| americanvalues.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

fuzer.net XSS vulnerability

Open Bug Bounty ID: OBB-466687 Description| Value ---|--- Affected Website:| fuzer.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

i-online-casinos.com XSS vulnerability

Open Bug Bounty ID: OBB-465740 Description| Value ---|--- Affected Website:| i-online-casinos.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

thefirstmilf.com XSS vulnerability

Open Bug Bounty ID: OBB-462864 Description| Value ---|--- Affected Website:| thefirstmilf.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

baker-taylor.com XSS vulnerability

Open Bug Bounty ID: OBB-462808 Description| Value ---|--- Affected Website:| baker-taylor.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

telephonebetting.net XSS vulnerability

Open Bug Bounty ID: OBB-462720 Description| Value ---|--- Affected Website:| telephonebetting.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

ppp.pornme.pm XSS vulnerability

Open Bug Bounty ID: OBB-462681 Description| Value ---|--- Affected Website:| ppp.pornme.pm Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

careersinmusic.com XSS vulnerability

Open Bug Bounty ID: OBB-462055 Description| Value ---|--- Affected Website:| careersinmusic.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

ville-thorigne-fouillard.fr XSS vulnerability

Open Bug Bounty ID: OBB-461962 Description| Value ---|--- Affected Website:| ville-thorigne-fouillard.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

khatrimaza.co XSS vulnerability

Open Bug Bounty ID: OBB-461763 Description| Value ---|--- Affected Website:| khatrimaza.co Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...