firstchoiceuk.com XSS vulnerability

Open Bug Bounty ID: OBB-364944 Description| Value ---|--- Affected Website:| firstchoiceuk.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

aclickintime.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-364044 Description| Value ---|--- Affected Website:| aclickintime.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

cumbriaimagebank.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-364037 Description| Value ---|--- Affected Website:| cumbriaimagebank.org.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

flohmarkt1.info XSS vulnerability

Vulnerable URL: http://www.flohmarkt1.info/calendar/jaxcalendar.php?Y=2017=10=21=showevent=273c5d3e339e197708d8482f04b8221ftaildate=28.10.2017title=Salierhalle+im+Mercurehotel+in+Bad+D%FCrkheim+-+9-15+Uhr%3B+Anmeldung+0179-111596%22%3E%3Csvg/onload=alert/XSSPOSED/%3E3=english \r\n Details:...

johnlewis.com XSS vulnerability

Vulnerable URL: https://www.johnlewis.com/browse/christmas/christmas-tree-skirts//N-5miq/x" Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 12:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3857 VIP websit...

lmmc.ca XSS vulnerability

Vulnerable URL: http://www.lmmc.ca/fr/concertdetails.php?concertid=%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11264925 VIP website status:| No Coordinated...

Mail.ru: XSS через подгрузку ссылки.

Доброго времени суток. Я нашел новую xss в https://connect.mail.ru/ POC: 1. Переходим на неизвестную ветку википедии, например эту https://io.wikipedia.org/wiki/Nenufaro 2. Вставляем туда скрипт " F232448 3. Подгружаем страничку википедии через наш сервис...

Infogram: No notification on Password Change

Hi Team, Description : I noticed there is an issue with password reset functionality user is not receiving notification when he reset password. Even though when user change password through profile, not getting an email notification. Issue: user not always gets a notification about password chang...

ccsmed.com XSS vulnerability

Open Bug Bounty ID: OBB-363914 Description| Value ---|--- Affected Website:| ccsmed.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

art-goods.jp XSS vulnerability

Vulnerable URL: http://www.art-goods.jp/artist.php?id=%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinat...

simsfh.com XSS vulnerability

Open Bug Bounty ID: OBB-363779 Description| Value ---|--- Affected Website:| simsfh.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pearlriverfuneralhome.com XSS vulnerability

Open Bug Bounty ID: OBB-363741 Description| Value ---|--- Affected Website:| pearlriverfuneralhome.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sfpl.org XSS vulnerability

Open Bug Bounty ID: OBB-363679 Description| Value ---|--- Affected Website:| sfpl.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tasami.com.sa XSS vulnerability

Vulnerable URL: http://www.tasami.com.sa/contact-form.php Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 23:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18873302 VIP website status:| No Coordinated...

semiagro.com.pe XSS vulnerability

Vulnerable URL: http://www.semiagro.com.pe/ver-producto.php?id=%22%3E%3Csvg/onload=prompt1%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 23:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12959361 VIP...

marriott.com XSS vulnerability

Vulnerable URL: https://www.marriott.com/rewards/createAccount/createAccountPage1Submit.mi?gigyaUID="confirm'XSSPOSED'...

akusherstvo.ru XSS vulnerability

Open Bug Bounty ID: OBB-360196 Description| Value ---|--- Affected Website:| akusherstvo.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

moviehdgo.com XSS vulnerability

Vulnerable URL: http://moviehdgo.com/search.php?id=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2364428 VIP website status:| No Coordinated Disclosure...

Duolingo: RCE in TinyCards for Android

We found and confirmed an RCE bug in TinyCards for Android. Is it in scope, and if not how do we report this security issue to DuoLingo...

pubgshowcase.com XSS vulnerability

Vulnerable URL: http://pubgshowcase.com/skin.php?item=P%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 152875 VIP website status:| No Coordinated Disclosure Timeline:...