20626 matches found
Mail.ru: Reflected XSS in https://e.mail.ru/
Reflected user-assisted XSS via crafted mailto "thread" parameter on "message has been sent" page...
Mail.ru: [et.mail.ru] ssrf 2
Привет, я подождал пока вы решите 251220 Эту багу, да она фикс. Затем я проверил другую и она работает, и видимо она не принадлежит одним и тем же параметрам при исправлении. Domain, site, application -- https://et.mail.ru/forums/ Steps to reproduce -- 1Заходим например в общий раздел...
audiomicro.com XSS vulnerability
Vulnerable URL: http://www.audiomicro.com/tracks/search%22%27%2D%2D%21%3E%3CImage%0CSrcset%3DK%0COnerror%3Dconfirm%60OPENBUGBOUNTY%60%0C/ Details: Description| Value ---|--- Patched:| Yes, at 14.11.2017 Latest check for patch:| 14.11.2017 07:17 GMT Vulnerability type:| XSS Vulnerability status:|...
pyme.pe XSS vulnerability
Vulnerable URL: https://www.pyme.pe//directorio?r=todos=todos=...
pdb.finkproject.org XSS vulnerability
Vulnerable URL: http://pdb.finkproject.org/pdb////browse.php?summary=...
agentrealtypro.com XSS vulnerability
Vulnerable URL: http://www.agentrealtypro.com/%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...
realtyexecutivespmg.com XSS vulnerability
Vulnerable URL: http://www.realtyexecutivespmg.com/%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 19:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...
villagerealestate.com XSS vulnerability
Open Bug Bounty ID: OBB-276643 Description| Value ---|--- Affected Website:| villagerealestate.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
coldwellbankersudbury.com XSS vulnerability
Vulnerable URL: http://www.coldwellbankersudbury.com/%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...
realtymarkllc.com XSS vulnerability
Open Bug Bounty ID: OBB-276615 Description| Value ---|--- Affected Website:| realtymarkllc.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Tor: languagechange event fires simultaneously on all tabs
The languagechange event, which fires when the user modifies the browser's language settings fires simultaneously on all tabs. This would allow an adversary to link multiple visits to a single user: the adversary e.g. a malicious ad provider has a script that listens for this event, and when fire...
villaangelica.it XSS vulnerability
Vulnerable URL: http://www.villaangelica.it/en/ischia.php?a=5=%27%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 21:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...
bloggang.com XSS vulnerability
Vulnerable URL: http://www.bloggang.com/index.php Details: Description| Value ---|--- Patched:| Yes, at 06.11.2017 Latest check for patch:| 06.11.2017 10:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13517 VIP website status:| Yes Coordinated Disclosure...
Gratipay: Sub domain take over in gratipay.com
Summary Sub domain take over in gratipay.com Description I scanned gratipay.com using knockpy to find the sub domains. I found one subdomain 'www.gratipay.com.herokudns.com'. But this sub domain is not registered in heroku. An attacker can buy this sub domain from heroku. Browsers Verified In...
costco.com XSS vulnerability
Vulnerable URL: https://www.costco.com/drug-results-details-price?drugName=x=%27-prompt%27OPENBUGBOUNTY%27-%27 Details: Description| Value ---|--- Patched:| Yes, at 06.11.2017 Latest check for patch:| 06.11.2017 10:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
icmomo.com XSS vulnerability
Vulnerable URL: http://icmomo.com//index.php?mvc=websearchindexsearchtext="...
gipp.ru XSS vulnerability
Open Bug Bounty ID: OBB-276305 Description| Value ---|--- Affected Website:| gipp.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
technik-einkauf.de XSS vulnerability
Vulnerable URL: http://www.technik-einkauf.de//?s=';";;---- OmniGooch --;'"...
buislesbaronnies.fr XSS vulnerability
Vulnerable URL: https://www.buislesbaronnies.fr/?s= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9696256 VIP website status:| No Check buislesbaronnies.fr SSL connection:| Grade: A+ Coordinated Disclosure...