qmov.com XSS vulnerability

Vulnerable URL: https://www.qmov.com/en/page-2?model==1'"%26%25alert"OpenBugBounty"...

laptopsystem.hu XSS vulnerability

Open Bug Bounty ID: OBB-401543 Description| Value ---|--- Affected Website:| laptopsystem.hu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

appsliced.co XSS vulnerability

Vulnerable URL: https://appsliced.co/apps?search=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%22OPENBUGBOUNTY%22%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 10.12.2017 Latest check for patch:| 10.12.2017 18:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

AlienVault : DNS pinning SSRF bypass

Summary: this issue is a bypass for this report: https://hackerone.com/reports/285380 . It is a SSRF bypass with DNS pinning. Description: We can bypass the SSRF protection with a simple domain that is resolving to 169.254.169.254 , like: ssrf-cloud.localdomain.pw Browsers Verified In: Firefox 56...

fuegodevida.com XSS vulnerability

Open Bug Bounty ID: OBB-399250 Description| Value ---|--- Affected Website:| fuegodevida.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

newlighting.com XSS vulnerability

Open Bug Bounty ID: OBB-397699 Description| Value ---|--- Affected Website:| newlighting.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

thegear.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-397682 Description| Value ---|--- Affected Website:| thegear.co.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

Ruby: Resolv::getaddresses bug that can be abused to bypass security measures.

Description Resolv::getaddresses is OS-dependent, therefore by playing around with different IP formats one can return blank values. This bug can be abused to bypass exclusion lists often used to protect against SSRF. | 💻 Machine 1 | 💻 Machine 2 | |--------------|---------------| | ruby 2.3.3p222...

AlienVault : SSRF protection bypass

As said in report 285380, using the decimal IP notation is bypassing the fix : https://www.threatcrowd.org/domain.php?domain=2852039166...

obssales.com XSS vulnerability

Vulnerable URL: http://www.obssales.com/augpreview/2016/photo.php?hip=1"...

bearingbus.com XSS vulnerability

Vulnerable URL: https://www.bearingbus.com/index.php?app=search=search=index=x%22%3E%3CsvG %20onLoad=prompt9%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 20922 VIP website...

colgate.com.co XSS vulnerability

Vulnerable URL: http://www.colgate.com.co/es/co/oc/search-results?tag=%22%5C%27%60%3C%2fScrpt%2f%22%27--%21%3E%20%3CScrpt%3E%20alert%28document.domain%29%20%3C%2fScrpt%3E%23 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

orbitonline.com XSS vulnerability

Open Bug Bounty ID: OBB-392874 Description| Value ---|--- Affected Website:| orbitonline.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

jobs.ch XSS vulnerability

Vulnerable URL: https://www.jobs.ch/en//direktLogin.php?mode=register--alert/XSSPOSED/...

crackfind.com XSS vulnerability

Open Bug Bounty ID: OBB-391555 Description| Value ---|--- Affected Website:| crackfind.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

learnonenglish.netlanguages.com XSS vulnerability

Vulnerable URL: http://learnonenglish.netlanguages.com/platform/info/template/english-courses/individuals/english-for-work.php?〈=he%22%3E%3Csvg%3E%3Cscript%3E/%3C@/%3Eprompt/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability...

recruitmentnorthwest.com XSS vulnerability

Open Bug Bounty ID: OBB-391457 Description| Value ---|--- Affected Website:| recruitmentnorthwest.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Mail.ru: Possibility to view subdepartments for arbitrary domain

By directly referencing to department ID in biz.mail.ru, it was possible to see the names of departments without knowledge of which organization this department belongs to Leakage of every existing department/unit of every domain via changing parameters directly in http request...

resultson.com XSS vulnerability

Open Bug Bounty ID: OBB-391144 Description| Value ---|--- Affected Website:| resultson.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

parksidedirect.co.uk XSS vulnerability

Vulnerable URL: http://www.parksidedirect.co.uk/searchpage.php?make==any+model=%27%22%3e%3csvg/onload=confirm/openbugbounty/%3e Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...