webapps.fitzmuseum.cam.ac.uk XSS vulnerability

Vulnerable URL: http://webapps.fitzmuseum.cam.ac.uk/explorer/index.php/"'--!confirm/OPENBUGBOUNTY/...

shop.acvgmbh.de XSS vulnerability

Vulnerable URL: https://shop.acvgmbh.de/suncms.php?siteId==%22%3E%3Csvg%3E%3Cscript%3E/%3C@/%3Eprompt/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websi...

new.3roos.com XSS vulnerability

Open Bug Bounty ID: OBB-447965 Description| Value ---|--- Affected Website:| new.3roos.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

PortSwigger Web Security: Improper Certificate Validation

1 Obtained a key from PortSwigger official site. 2 Downloaded latest version of burp 1.7.29 from PortSwigger and activated license. 3 Downloaded previous version of burp v1.7.17 and used same key for the activation. And, I was able to activate license on the old version of BurpSuite. Impact Singl...

RBKmoney: Information Disclosure - Composer.lock

Non-sensitive information disclosure via composer.lock...

fairygodboss.com XSS vulnerability

Open Bug Bounty ID: OBB-446724 Description| Value ---|--- Affected Website:| fairygodboss.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

LocalTapiola: Verbose error message reveals internal system hostnames, protols and used ports (yrityspalvelu.tapiola.fi)

Issue The reporter found an error page that contained a reference to a server name + port in the internal network. No actual vulnerability or weakness was reported. Fix The error page was changed to a static page. Reasoning Trivial error page injection reports will not be accepted for this domain...

ebesucher.de XSS vulnerability

Vulnerable URL: https://www.ebesucher.de/anmelden Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 35841 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted...

dga-ag.de XSS vulnerability

Vulnerable URL: https://www.dga-ag.de/suche.html Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 867345 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted...

follx.com XSS vulnerability

Vulnerable URL: https://follx.com/messages/1236/view Details: Description| Value ---|--- Patched:| Yes, at 16.12.2017 Latest check for patch:| 16.12.2017 22:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 899391 VIP website status:| No Coordinated Disclosure...

Razer US: [zvault.razerzone.com] URL validation bypass

The researcher discovered that a page on our zVault that intended to perform redirection which allowed a URL bypass due to a coding flaw. The flaw was an attempt at sanitation that could actually be leveraged to redirect to a URL string useful for phishing. He provided an analysis of the code and...

getlinkmixcloud.com XSS vulnerability

Open Bug Bounty ID: OBB-444651 Description| Value ---|--- Affected Website:| getlinkmixcloud.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

porvir.org XSS vulnerability

Vulnerable URL: http://porvir.org/?s=%22%3E%3Csvg%2Fonload%3Dconfirm%2FOPENBUGBOUNTY%2F%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 165051 VIP website status:| No Coordinated Disclosure Timeline:...

Ubiquiti Inc.: Stored XSS => community.ubnt.com

Due to an error on the user input validation process, it was possible to create posts in some forums on community.ubnt.com with arbitrary HTML code, an especially crafted message could inject Javascript code on the page, resulting in stored XSS. A Stored XSS issue Was Discovered in ubnt Community...

preischeck.net XSS vulnerability

Open Bug Bounty ID: OBB-443526 Description| Value ---|--- Affected Website:| preischeck.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

funmail2u.de XSS vulnerability

Open Bug Bounty ID: OBB-442383 Description| Value ---|--- Affected Website:| funmail2u.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

verleihshop.de XSS vulnerability

Vulnerable URL: https://www.verleihshop.de/kontaktsenden.html Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 90879 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerabilit...

sowoodemo.im-web.biz XSS vulnerability

Open Bug Bounty ID: OBB-442355 Description| Value ---|--- Affected Website:| sowoodemo.im-web.biz Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

calderaforms.com XSS vulnerability

Open Bug Bounty ID: OBB-442168 Description| Value ---|--- Affected Website:| calderaforms.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

tennisclub-rednitzhembach.de XSS vulnerability

Vulnerable URL: http://www.tennisclub-rednitzhembach.de/index.php/component/content/article?id=Keritzy%22%3EKeirtzy%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3Earticle Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...