20626 matches found
kunert.de XSS vulnerability
Vulnerable URL: https://www.kunert.de/Newsletter/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 815892 VIP website status:| No Coordinated Disclosure Timeline: Description| Value...
edifikainmobiliaria.com XSS vulnerability
Vulnerable URL: http://www.edifikainmobiliaria.com/es/%22+%3E%3C%252Fsvg%3E%3C%252F|%3E%3Csvg%252Fonload=prompt2%3E/7/0-0-g-p-0/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
campestreinmobiliaria.com XSS vulnerability
Vulnerable URL: http://www.campestreinmobiliaria.com/es/%22+%3E%3C%252Fsvg%3E%3C%252F|%3E%3Csvg%252Fonload=prompt2%3E/7/0-0--g-p-0/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
holidayiq.com XSS vulnerability
Vulnerable URL: http://www.holidayiq.com/hotels/diu/1%22%3E%3Csvg/onload=alert%22xssed%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16521 VIP website status:| Yes Coordinat...
Inflection: Limited Account Takeover via Backup codes
Researcher submitted a duplicate of a previously-submitted report and requested public disclosure of this report...
kazan.ucheba.ru XSS vulnerability
Open Bug Bounty ID: OBB-356490 Description| Value ---|--- Affected Website:| kazan.ucheba.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
highend3d.com XSS vulnerability
Vulnerable URL: https://www.highend3d.com/?tag=...
bulat.ru XSS vulnerability
Vulnerable URL: http://bulat.ru/forma/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2318490 VIP website status:| No Check bulat.ru SSL connection:| Grade: F Coordinated Disclosure Timeline: Description| Value...
link.electronicdesign.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-355664 Description| Value ---|--- Affected Website:| link.electronicdesign.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
link.e.americanregistry.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-355661 Description| Value ---|--- Affected Website:| link.e.americanregistry.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
concorde-travel.com XSS vulnerability
Vulnerable URL: http://www.concorde-travel.com/searchresult.php?keyword=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11741444 VIP website status:| No...
hearingaids101.com XSS vulnerability
Vulnerable URL: http://www.hearingaids101.com/sitesearch.aspx?keywords=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%22OPENBUGBOUNTY%22%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...
4promoproducts.com XSS vulnerability
Vulnerable URL: http://4promoproducts.com/search.php Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 12:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...
enetadvertising.com XSS vulnerability
Vulnerable URL: http://enetadvertising.com/contact.php?email=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%22OPENBUGBOUNTY%22%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...
varzesh.eu XSS vulnerability
Vulnerable URL: http://varzesh.eu/?type=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 38551 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|---...
link.urgentcomm.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-355471 Description| Value ---|--- Affected Website:| link.urgentcomm.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
QIWI: apache access.log leakage via long request on https://rapida.ru/
Issue access.log is leaked by attacker who trying send many requests. Explain: Honestly i don't know how the bug is happened, but i guess if the access.log is too large, it will dump some part into the response, and attacker happily get it. Reproduce: 1. Access to https://rapida.ru/search/?q= 2...
cbssports.com XSS vulnerability
Vulnerable URL: https://www.cbssports.com/registration?masterproduct=ktr10" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 586 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|---...
thekitchn.com XSS vulnerability
Vulnerable URL: http://www.thekitchn.com/dmca?'\n Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2520 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted...