20626 matches found
Gratipay: CSP "script-src" includes "unsafe-inline" in https://gratipay.com
SUMMARY: Related Report: 225833 Gratipay is using unsafe-inline in script-src csp headers which allows the use of inline resources, such as inline elements, javascript: URLs, inline event handlers, and inline elements. Proof Of Concept By Using cURL: curl -I https://gratipay.com The results See m...
metal-archives.com XSS vulnerability
Vulnerable URL: https://www.metal-archives.com/authentication/login Details: Description| Value ---|--- Patched:| Yes, at 09.06.2017 Latest check for patch:| 09.06.2017 04:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5374 VIP website status:| Yes Check...
Weblate: CSP "script-src" includes "unsafe-inline" in weblate.org and demo.weblate.org
Weblate is using unsafe-inline in script-src csp headers which allows the use of inline resources, such as inline elements, javascript: URLs, inline event handlers, and inline elements. POC: HTTP/1.1 200 OK Server: nginx Date: Tue, 23 May 2017 10:49:15 GMT Content-Type: text/html; charset=utf-8...
recipe4living.com XSS vulnerability
Vulnerable URL: http://www.recipe4living.com/recipes/invoker/JMXInvokerServlet/"' /Style=position:fixed;top:0;left:0;font-size:999px; /Onmouseenter=confirmOPENBUGBOUNTY // Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability...
musik2822.com XSS vulnerability
Vulnerable URL: http://www.musik2822.com/busqueda.php?genero=%22%3E%3C/title%3E%27%3E;%3C/script%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:22 GMT Vulnerability type:| XSS Vulnerability status:|...
whereinjamaica.com XSS vulnerability
Vulnerable URL: http://whereinjamaica.com/v4/search/maplocation.php?=8797...
dirkhannemann.de XSS vulnerability
Vulnerable URL: http://www.dirkhannemann.de/nav.php?referenz="';--=Links Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
nanomaker.com XSS vulnerability
Vulnerable URL: http://www.nanomaker.com/nav.php?idnews=38...
valdarnotech.it XSS vulnerability
Vulnerable URL: http://www.valdarnotech.it/cerca.asp?cerca=prompt'OPENBUGBOUNTY'...
15104506505.com XSS vulnerability
Vulnerable URL: http://www.15104506505.com/display.php?id=%22%3E%3Cscript%3E%20alert%27XSSPOSED%27%20%3C/script%3E= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...
theworldchanger.net XSS vulnerability
Vulnerable URL: http://theworldchanger.net/resources/resourcesl.jsp?boardcd=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22XSSPOSED%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
search-hadoop.com XSS vulnerability
Vulnerable URL: http://search-hadoop.com/avro?q="'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 440802 VIP website status:| No Check search-hadoop.com SSL connection:| Grade: ...
r.fox-itnews.fox-it.com XSS vulnerability
Vulnerable URL: http://r.fox-itnews.fox-it.com/%22%3E%3Cscript%3Ealert'OPENBUGBOUNTY';%3C/script%3Exsspowned.html Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...
otis.com XSS vulnerability
Vulnerable URL: http://www.otis.com/site/gb/pages/default.aspx?url= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 118755 VIP website status:| No Check otis.com SSL connection:| Grade: F Coordinated Disclosure...
artam.com.tw XSS vulnerability
Vulnerable URL: http://www.artam.com.tw/english/product/list.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check artam.com.tw...
emuparadise.me XSS vulnerability
Vulnerable URL: https://www.emuparadise.me/roms/search.php/"'--!...
jll.be XSS vulnerability
Vulnerable URL: http://www.jll.be/belgium/nl-nl/search?k=%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...
buzzfeed.com XSS vulnerability
Vulnerable URL: https://www.buzzfeed.com/h1/vflt/angelospagnolo/102-dalmations-to-love?utmterm=4ldrb9p=%27"@--...
eccos-pro.com XSS vulnerability
Vulnerable URL: http://www.eccos-pro.com/suche Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5383700 VIP website status:| No Check eccos-pro.com SSL connection:| Grade: F...