bestwebsite.gallery XSS vulnerability

Vulnerable URL: https://bestwebsite.gallery/out?url=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 31.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 407249 VIP website status:|...

Ubiquiti Inc.: Authenticated RCE in ToughSwitch

In ToughSwitch v1.3.5 and prior, due to lack of validation is possible to execute an CSRF. If an authenticated user access an attacker controlled web page, it could trigger the CSRF and the resulting request could trigger an RCE. An RCE vulnerability existed in the ToughSwitch that could be...

rutorka.net XSS vulnerability

Vulnerable URL: http://www.rutorka.net/?search=%22%3E%3Csvg%20onload=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 129729 VIP website status:| No Coordinated Disclosure Timeline:...

gigabook.ir XSS vulnerability

Vulnerable URL: http://gigabook.ir/basket.php?type=search Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5304160 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability...

clean-up.ru XSS vulnerability

Vulnerable URL: http://www.clean-up.ru/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline:...

dvbt2hd.de XSS vulnerability

Vulnerable URL: http://dvbt2hd.de/metanavigation?newslettersuccess=1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 639421 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

materacademybay.com XSS vulnerability

Vulnerable URL: http://www.materacademybay.com/apps/news/shownews.jsp?RECID=453836=0=true=%3C/title%3E%3Csvg/onload=alert/XSSPOSED/%3E=true Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11878047 VIP website...

darbonnewoods.com XSS vulnerability

Vulnerable URL: http://www.darbonnewoods.com/apps/news/shownews.jsp?RECID=454912=0=true=%3C/title%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 01.11.2017 Latest check for patch:| 01.11.2017 18:20 GMT Vulnerability type:| XSS Vulnerability status:|...

VK.com: XSS в товарах

Отсутствие фильтрации при поиске в товарах. Не было фильтрации некоторых символов в поиске товаров. Из-за еще одного встроенного фильтра все приравнивалось к ="" и не получалось выполнить js. Выход из ситуации был найден в тот же день, получилось выполнить js:...

mabanque.fortuneo.fr XSS vulnerability

Vulnerable URL: https://mabanque.fortuneo.fr/fr/actualites/tout-le-fil/999984/" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline:...

it.arbornetworks.com XSS vulnerability

Open Bug Bounty ID: OBB-318352 Description| Value ---|--- Affected Website:| it.arbornetworks.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

premioseikon.com XSS vulnerability

Vulnerable URL: http://www.premioseikon.com/Banner.php?id=13'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4374619 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

escon-gmbh.com XSS vulnerability

Vulnerable URL: http://www.escon-gmbh.com/cms/typo3conf/ext/kjimagelightbox2/lib/class.txkjimagelightbox2print.php?image=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

renebates.com XSS vulnerability

Vulnerable URL: https://www.renebates.com/amain.php?id=13'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 355875 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability...

myviolet.com XSS vulnerability

Vulnerable URL: http://www.myviolet.com/viewvarieties.php?id=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1822725 VIP website status:| No Coordinated Disclosure Timeline:...

pelttrader.co.uk XSS vulnerability

Vulnerable URL: http://pelttrader.co.uk/index.php?id=13'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6192930 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability...

museumofconflict.eu XSS vulnerability

Vulnerable URL: http://www.museumofconflict.eu/singletext.php?id=13'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description|...

meta-refresh.me Open Redirect vulnerability

Vulnerable URL: https://meta-refresh.me/2?u=data%3Atext%2Fhtml%3Bbase64%2CPHNjcmlwdD5hbGVydCgvT1BFTkJVR0JPVU5UWS8pPC9zY3JpcHQ%2B Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 31.12.2017 Vulnerability type:| Open Redirect Vulnerability status:|...

wonderfulmachine.com XSS vulnerability

Vulnerable URL: https://wonderfulmachine.com/ref?r=1=javascript:prompt/OPENBUGBOUNTY/; Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 31.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 465322 VIP website...

clicads.com.uy XSS vulnerability

Vulnerable URL: http://www.clicads.com.uy/buscar/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline:...