canalneu.cat XSS vulnerability

Vulnerable URL: http://www.canalneu.cat/bo/webhit.php?id=13'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11730837 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

lider-glass.ru XSS vulnerability

Vulnerable URL: http://lider-glass.ru/m/out.php?ID=13'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3359714 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability...

service-personal.de XSS vulnerability

Open Bug Bounty ID: OBB-385583 Description| Value ---|--- Affected Website:| service-personal.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

keraladial.com XSS vulnerability

Open Bug Bounty ID: OBB-385548 Description| Value ---|--- Affected Website:| keraladial.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dandb.com XSS vulnerability

Open Bug Bounty ID: OBB-385550 Description| Value ---|--- Affected Website:| dandb.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Razer US: Reflected XSS on domain support.razerzone.com

The researcher hisxo discovered a reflected XSS vulnerability on support.razerzone.com. hisxo also worked with H1 Triage to provide a valid PoC that demonstrated payload delivery using Burp Suite. We appreciate the extra work and look forward to working with the researcher in the future...

nsv-online.de XSS vulnerability

Vulnerable URL: http://nsv-online.de/turniere/wieste-cup-2017/?ak=x%27%3E%3CsvG%20onLoad=prompt9%3E=Trumpa,Jan=spieler Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1279274 VIP website status:| No Coordinated...

ezinepost.com XSS vulnerability

Open Bug Bounty ID: OBB-385313 Description| Value ---|--- Affected Website:| ezinepost.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

icmacentre.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-385298 Description| Value ---|--- Affected Website:| icmacentre.ac.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

AlienVault : [www.threatcrowd.org] Reflected XSS Bypass

bypass for reflected XSS utilizing JS...

kozmetikfiyatlari.com XSS vulnerability

Open Bug Bounty ID: OBB-385007 Description| Value ---|--- Affected Website:| kozmetikfiyatlari.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

hetzner.com XSS vulnerability

Vulnerable URL: https://www.hetzner.com/support-form Details: Description| Value ---|--- Patched:| Yes, at 02.11.2017 Latest check for patch:| 02.11.2017 11:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 41913 VIP website status:| Yes Coordinated Disclosure...

ramlasports.com XSS vulnerability

Vulnerable URL: http://ramlasports.com/contact-ramla-sports1.php Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description| Valu...

edureka.co XSS vulnerability

Open Bug Bounty ID: OBB-382635 Description| Value ---|--- Affected Website:| edureka.co Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

uni-oldenburg.de XSS vulnerability

Vulnerable URL: https://www.uni-oldenburg.de/nc/suche/?q=ddudda%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Type=Text%20AutoFocus%20/;%20OnFocus=confirm/openbugbounty/%20//%3E%3CSvg%3E=FORID%3A9=UTF-8=iso-8859-1=009619950304644246032%3Atmpbaar2o8i Details: Description| Value ---|--- Patched:| Yes, at...

b2bbank.com XSS vulnerability

Vulnerable URL: https://b2bbank.com/communications/?audience=0=x%22%3E%3CsvG%20onLoad=prompt9%3E=0==sentdate=0 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 664408 VIP website status:| No Coordinated Disclosure...

snapfish.ie XSS vulnerability

Vulnerable URL: https://www.snapfish.ie/personalised-gifts/vouchers-deals-offers?campaignName=wintersaleie=tbm...

snapfish.fr XSS vulnerability

Vulnerable URL: https://www.snapfish.fr/2/album-photo?cobrandName=snapfishit=tbm...

dreamsoperator.com XSS vulnerability

Vulnerable URL: http://www.dreamsoperator.com/hotel.php?id=401%22%27--!%3E%3C/Title/%3C/Style/%3C/Script/%3C/c/%3C/Noscript/%3C/Pre/%3C/Xmp%3E%3CBody/OnPageShow=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly...

International Islamic University Chittagong: Information Exposure Through Directory Listing

Hi Team, I would like to report Information Exposure Through Directory Listing bug which is presented in iiucbd.com PoC: Navigate to the following Link: 'http://119.18.148.140/hrd/js/' internal pages are exposed. FIX: Disable the directory listing. Regards, mrroot...