pubgshowcase.com XSS vulnerability

Vulnerable URL: http://pubgshowcase.com/inventory.php?steamid=%22%3E%3Cscript%3Ealert%22Oops%22%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 128767 VIP website status:| No Coordinated Disclosure...

Unikrn: session_id is not being validated at email invitation endpoint

sessionid is not being validated at email invitation endpoint request sample: POST /apiv1/inviteemail HTTP/1.1 Host: unikrn.com User-Agent: Mozilla/5.0 Windows NT 6.1; Win64; x64; rv:57.0 Gecko/20100101 Firefox/57.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5...

jobberman.com XSS vulnerability

Open Bug Bounty ID: OBB-429235 Description| Value ---|--- Affected Website:| jobberman.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

Coinbase: User provided values passed to PHP unset() function

In the Coinbase wpe commerce open source library, a researcher observed a call to the PHP unset function that relied on user controlled input. The reporter observed that this could allow a malicious user to destroy arbitrary variables in the environment where this library is deployed...

klimat-kom.com XSS vulnerability

Vulnerable URL: http://klimat-kom.com/search?search=%3CsvG%20onLoad=prompt9%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18249438 VIP website status:| No Coordinated Disclosure Timeline: Description| Value...

shop.onlime.ru XSS vulnerability

Vulnerable URL: http://shop.onlime.ru/shoporder/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

LocalTapiola: Exposed authentication (/cs/Satellite)

Basic report information Brute Force and Information disclosure Domain: www.lahitapiola.fi Steps To Reproduce: REQUEST POST /cs/Satellite HTTP/1.1 Host: www.lahitapiola.fi User-Agent: Mozilla/5.0 Windows NT 6.2; WOW64; rv:18.0 Gecko/20100101 Firefox/18.0 Accept:...

jkoverweel.com XSS vulnerability

Vulnerable URL: http://jkoverweel.com/search.php?country====%27%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6740209 VIP website status:| No Coordinated Disclosure...

bitdefender.com XSS vulnerability

Open Bug Bounty ID: OBB-428801 Description| Value ---|--- Affected Website:| bitdefender.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

notimerica.com XSS vulnerability

Open Bug Bounty ID: OBB-428743 Description| Value ---|--- Affected Website:| notimerica.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

villagecharter.org XSS vulnerability

Open Bug Bounty ID: OBB-428515 Description| Value ---|--- Affected Website:| villagecharter.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

hotelscomparison3.co.uk XSS vulnerability

Vulnerable URL: http://www.hotelscomparison3.co.uk/nohotelsearchresults.php?userSessionId=17de78f4b1df48fdaf32d6c5c8ee0d09=2 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2939651 VIP website status:| No...

indiemag.fr XSS vulnerability

Vulnerable URL: https://www.indiemag.fr/videos/gameplay/preview-tiny-metal-jeu-strategie-case-case-facon-advance-wars/x'%3E%3CsvG%20onLoad=prompt9%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 224958 VIP...

yarbro.com XSS vulnerability

Open Bug Bounty ID: OBB-427668 Description| Value ---|--- Affected Website:| yarbro.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

christianjobs.com.au XSS vulnerability

Open Bug Bounty ID: OBB-427333 Description| Value ---|--- Affected Website:| christianjobs.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

au.answers.acer.com XSS vulnerability

Open Bug Bounty ID: OBB-427209 Description| Value ---|--- Affected Website:| au.answers.acer.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

onlinediagnose.de XSS vulnerability

Vulnerable URL: https://www.onlinediagnose.de/index.php Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1004048 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability...

nfoic.org XSS vulnerability

Vulnerable URL: http://www.nfoic.org/search/node Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 781261 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted...

gotsport.com XSS vulnerability

Open Bug Bounty ID: OBB-424117 Description| Value ---|--- Affected Website:| gotsport.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

Valve: Link filter protection bypass

Description Hi, there is a protection bypass in the linkfilter function. By using the character 。 %E3%80%82 url encoded instead of a normal dot in urls, it is possible to bypass the blocking. PoC Normal request : https://steamcommunity.com/linkfilter/?url=pornhub.com F240919 Bypass :...