ehamedya.com XSS vulnerability

Vulnerable URL: http://www.ehamedya.com/?s="/alert/OPENBUGBOUNTY/...

mintemafest.dk XSS vulnerability

Vulnerable URL: http://www.mintemafest.dk/Search.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1936136 VIP website status:| No Check mintemafest.dk SSL connection:| Grade: F...

praximed.com XSS vulnerability

Vulnerable URL: https://praximed.com/en/catalogsearch/result/?q="--!" Details: Description| Value ---|--- Patched:| Yes, at 05.10.2017 Latest check for patch:| 05.10.2017 05:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2600282 VIP website status:| No Check...

sprice.de XSS vulnerability

Vulnerable URL: https://sprice.de/index.php Details: Description| Value ---|--- Patched:| Yes, at 04.05.2017 Latest check for patch:| 04.05.2017 11:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check sprice.d...

Samsung Smart TV Wi-Fi Direction Improper Authentication Vulnerability

Exploit for hardware platform in category remote exploits Samsung Smart TV Wi-Fi Direct Improper Authentication -------------------------------------------------------------------------------- 1. Advisory Information Title: Samsung Smart TV Wi-Fi Direct Improper Authentication Advisory ID:...

iadb.org XSS vulnerability

Vulnerable URL: http://www.iadb.org/aboutus/trustfunds/FundSearch.cfm?Country=AU=...

trackersbay.com XSS vulnerability

Vulnerable URL: http://trackersbay.com/register/cart.php?qty=1=2415041501"';--=add Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1124540 VIP website status:| No Coordinated...

captreefleet.com XSS vulnerability

Vulnerable URL: http://captreefleet.com/members/modules/cart.php?id=23=c"';--=pqbmosbvg2tde8b5uq44e28tk3 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6080621 VIP website status:|...

salton.co.za XSS vulnerability

Vulnerable URL: http://www.salton.co.za/recipe-category.php?id=1"';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3945854 VIP website status:| No Check salton.co.za SSL...

m-culture.gov.dz XSS vulnerability

Vulnerable URL: https://www.m-culture.gov.dz/mc2/fr/lirelegis.php?id=201"'/;a=eval;b=alert;ab/ OPENBUGBOUNTY/.source;...

tritonjewelry.com XSS vulnerability

Vulnerable URL: http://www.tritonjewelry.com/Jewelry.action?search==seasonCode.name:FA15"'--!=11-5810YC-G Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1809370 VIP website status:...

Weblate: weblate.org: X-XSS-Protection not enabled

Hi, X-Xss-Protection @https://weblate.org has not been set. This header is used to configure the built in reflective XSS protection found in Internet Explorer, Chrome and Safari Webkit. Valid settings for the header are 0, which disables the protection, 1 which enables the protection and 1;...

atest.mcdir.ru XSS vulnerability

Vulnerable URL: http://atest.mcdir.ru/?cont=kliets=1' Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check atest.mcdir.ru SSL connection:| Grade: F Coordinated...

spiecareercenter.org XSS vulnerability

Vulnerable URL: https://spiecareercenter.org/%22%3E%3Csvg/onload=%22alert'OPENBUGBOUNTY'%22%3E Details: Description| Value ---|--- Patched:| Yes, at 13.09.2017 Latest check for patch:| 13.09.2017 01:24 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1064468 VIP...

VK.com: Посмотреть видеоролики, которые пользователь когда-либо скидывал в ЛС.

Просмотр превью и названия некоторых видеозаписей...

drk.de XSS vulnerability

Vulnerable URL: https://www.drk.de/suche/?id=502kesearchpi1page=1kesearchpi1sword=test...

bape.com XSS vulnerability

Vulnerable URL: https://bape.com/webstore/?brandid=--" " "...

Weblate: Improper access control when an added email address is deleted from authentication

Hi team, There is improper access control kind of vulnerability present in your web application. Steps to reproduce: 1. Create an account. 2.You will recevie a link on email about confrimation. 2. Login into it and add another email address in authentication tab and You will recevie a link on the...

neuprime.de XSS vulnerability

Vulnerable URL: https://www.neuprime.de/newshistory.php?%22%27%2D%2D%21 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3943931 VIP website status:| No Check neuprime.de SSL...

Weblate: Logout CSRF

Hi Team, This is a low risk but want you to know that logout on this domain demo.weblate.org did not protect the logout form with csrf token, therefor i can logout any user by sending this url https://demo.webplate.org/accounts/logout/. Logout should have post method with a valid csrf token. Let ...