acsp.site-ym.com XSS vulnerability

Vulnerable URL: https://acsp.site-ym.com/login.aspx?returl=%22--%3E%20%3C/script%3E%3Csvg/onload=%27;alert/OPENBUGBOUNTY/;%27%3E Details: Description| Value ---|--- Patched:| Yes, at 02.10.2017 Latest check for patch:| 02.10.2017 09:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

weingut-georg-zang.de XSS vulnerability

Vulnerable URL: http://weingut-georg-zang.de/de/kontakt?coID=6 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16840619 VIP website status:| No Check weingut-georg-zang.de SSL...

m.finn.no XSS vulnerability

Vulnerable URL: https://m.finn.no/job/fulltime/ad.html?finnkode=33209762="'--!...

churchjobs.net XSS vulnerability

Vulnerable URL: https://www.churchjobs.net/cgi-bin/mychurchjobs.pl?favadd=yes=7588"'--!confirmOPENBUGBOUNTY...

reg.mutantbox.com XSS vulnerability

Vulnerable URL: http://reg.mutantbox.com/liberators/newreg/?tag=GG-GB-S|Onlinegame-Phrase...

daughterswap.com XSS vulnerability

Vulnerable URL: http://daughterswap.com/t2/?nats=MTA0MDIuMi43NS4xOTQyLjUwLjAuMC4wLjA...

WordPress: Multiple stored XSS in WordPress

Enguerran discovered a way to store payloads that would trigger XSS in the MediaElement Flash and Silverlight files that were bundled with WordPress. We coordinated a fix with MediaElement, and moved the files from WordPress Core to an optional plugin, since most users no longer needed them...

leantesting.com XSS vulnerability

Vulnerable URL: https://leantesting.com/?s="" Details: Description| Value ---|--- Patched:| Yes, at 17.10.2017 Latest check for patch:| 17.10.2017 14:00 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 183960 VIP website status:| No Coordinated Disclosure Timelin...

redcigar.ru XSS vulnerability

Vulnerable URL: http://redcigar.ru/production/search/?q=%22%3E%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3E Details: Description| Value ---|--- Patched:| Yes, at 04.07.2017 Latest check for patch:| 04.07.2017 23:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Ubiquiti Inc.: Privilege escalation in the client impersonation functionality

In UCRM 2.3.0-beta4 and prior, consequence of a lack of validation in Client Impersonation functionality, an attacker with access to an Read-Only account can escalate privileges to Admin. The vulnerability was fixed in UCRM 2.3.0...

adjib.dj XSS vulnerability

Vulnerable URL: http://www.adjib.dj/annuaire/annuaireweb.php?rubrique=12=Education, Enseignement../offres/ls.php...

dccomics.com XSS vulnerability

Open Bug Bounty ID: OBB-225381 Description| Value ---|--- Affected Website:| dccomics.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tuniscope.com XSS vulnerability

Open Bug Bounty ID: OBB-225355 Description| Value ---|--- Affected Website:| tuniscope.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

toledoshrm.org XSS vulnerability

Vulnerable URL: http://toledoshrm.org/login.cfm?message= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 20866585 VIP website status:| No Check toledoshrm.org SSL connection:| Grade...

X (Formerly Twitter): HTTP 401 response injection on "amp.twimg.com/amplify-web-player/prod/source.html" through "image_src" parameter

Overview The imagesrc parameter on amp.twimg.com accepts images from any arbitrary host, therefore, enabling attackers to supply image destinations that respond with a "HTTP 401 Unauthorized" response. Description HTTP 401 attacks occur when there is no whitelisting or proxying images and/or page...

apply.embark.com XSS vulnerability

Vulnerable URL: https://apply.embark.com/student/fulbright/international/20/default.asp?Message= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

ukw.de XSS vulnerability

Vulnerable URL: http://www.ukw.de/servicebereich/suche.html Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 340217 VIP website status:| No Check ukw.de SSL...

shopify-scripts: heap-buffer-overflow (read outside of buffer) in mrb_vm_exec()

Triggered in 3231219 14 April 2017. Compiled with afl-gcc + asan. ./mirb test000 ==10555==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60200001c920 at pc 0x52be2c bp 0x7ffe6751ada0 sp 0x7ffe6751ad98 READ of size 16 at 0x60200001c920 thread T0 0 0x52be2b in mrbvmexec...

drankenmaes.be XSS vulnerability

Vulnerable URL: http://www.drankenmaes.be/search.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check drankenmaes.be SSL...

publicationslist.org XSS vulnerability

Vulnerable URL: http://publicationslist.org/php/authors.php?adv=1=aaaa';alert'OPENBUGBOUNTY';// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 413595 VIP website status:| No Check...