en.freedom.tm XSS vulnerability

Vulnerable URL: http://en.freedom.tm/login?rdr="'--!confirm/OPENBUGBOUNTY/...

Internet Bug Bounty: Multiple issues in Libxml2 (2.9.2 - 2.9.5)

Libxml2 is the XML C parser and toolkit developed for the Gnome project. Due to its flexible C implementation and continuous development, Libxml2 is known to be very portable, the library builds and works on a variety of systems Linux, Unix, Windows, CygWin, MacOS, MacOS X, RISC Os, OS/2, VMS, QN...

ontspanningspraktijkklara.nl XSS vulnerability

Open Bug Bounty ID: OBB-439753 Description| Value ---|--- Affected Website:| ontspanningspraktijkklara.nl Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

old.runrepeat.com XSS vulnerability

Vulnerable URL: https://old.runrepeat.com/?q=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

u3asites.org.uk XSS vulnerability

Vulnerable URL: http://u3asites.org.uk/oversights/splitgroups.php Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 314225 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

festlokalcenter.se XSS vulnerability

Vulnerable URL: http://festlokalcenter.se?s=confirm/OPENBUGBOUNTY/...

infopedia.pt XSS vulnerability

Vulnerable URL: https://www.infopedia.pt/dicionarios/lingua-portuguesa/sd/%22--!%3E%3CSvg/OnLoad=confirm1%3E%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13464 VIP website status:| Yes Coordinated Disclosur...

VK.com: XSS работающая по всему сайту, где есть упоминания

Self-XSS в упоминаниях...

reviveourhearts.com XSS vulnerability

Vulnerable URL: https://www.reviveourhearts.com/search//"'--!confirm/OPENBUGBOUNTY/...

yaoota.com XSS vulnerability

Vulnerable URL: http://yaoota.com/en-eg/search/?q=alert'OPENBUGBOUNTY.ORG'...

depressionhurts.us XSS vulnerability

Open Bug Bounty ID: OBB-432423 Description| Value ---|--- Affected Website:| depressionhurts.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

riftgoldshop.com XSS vulnerability

Vulnerable URL: http://www.riftgoldshop.com/selectserver-usd.asp?ServerName="'--!confirm/OPENBUGBOUNTY/...

vehiclehistory.com XSS vulnerability

Vulnerable URL: https://www.vehiclehistory.com/reports/free-reviews-complaints-report/2/exterior-dimensions.php?make=acura=...

goconqr.com XSS vulnerability

Vulnerable URL: https://www.goconqr.com/search/?q=alert'OPENBUGBOUNTY.ORG'...

zooplus.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-432181 Description| Value ---|--- Affected Website:| zooplus.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

parker.com XSS vulnerability

Vulnerable URL:...

projectmanagement.com XSS vulnerability

Vulnerable URL: https://www.projectmanagement.com//search//searchindex.cfm?index=1=dateDESC" Details: Description| Value ---|--- Patched:| Yes, at 29.11.2017 Latest check for patch:| 29.11.2017 04:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 38680 VIP...

Ruby on Rails: ActionController::Parameters .each returns an unsafe hash

Rails 5.1.4 The goal of ActionController::Parameters's permit method strong parameters is to prevent accidental trust in the parameters sent by the client. We can therefore not simply create a hash of all the parameters in the params without permitting them first. When we really want to do this...

VK.com: Stealing Private Information in VK Android App through PlayerProxy Port Remotely

Incorrect interaction with the network...

stockhouse.com XSS vulnerability

Open Bug Bounty ID: OBB-429754 Description| Value ---|--- Affected Website:| stockhouse.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...