20626 matches found
X (Formerly Twitter): [██████████.gnip.com] .htpasswd disclosure
Greetings, There is a .htpasswd disclosure on your subdomain : - Go to : http://█████████.gnip.com/.htpasswd - previewgnip:██████ F173925 Fix : Protect the htpasswd file...
VK.com: Возможность взлома любого пользователя, не использующего двухфакторной аутентификации, через получения кода восстановления на чужой номер.
Уязвимость в библиотеке приложения VK на Android, позволяющая получить на свой номер код для восстановления некоторых страниц. Из-за уязвимости можно было отправить код восстановления любой страницы на чужой номер, спасала только двухфакторная аутентификация...
manomano.fr XSS vulnerability
Vulnerable URL: https://www.manomano.fr/contact Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9947 VIP website status:| Yes Check manomano.fr SSL connection:| Grade: A Coordinated...
jobzone.publishersweekly.com XSS vulnerability
Vulnerable URL: http://jobzone.publishersweekly.com/jobseeker/search/results/?siteid=22364=netizen01k%22+autofocus+onfocus%3Dalert%28%2FOPENBUGBOUNTY%2F%29+%22+ Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 19:14 GMT Vulnerability type:| XSS...
governmentjobs.civicjobs.com XSS vulnerability
Vulnerable URL: http://governmentjobs.civicjobs.com/jobseeker/search/results/?siteid=21891=netizen01k%22+autofocus+onfocus%3Dalert%28%2FOPENBUGBOUNTY%2F%29+%22+&t735;= Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 19:14 GMT Vulnerability type...
oooo.dating XSS vulnerability
Vulnerable URL: https://oooo.dating/app/signup.php Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3465154 VIP website status:| No Check oooo.dating SSL...
rusdate.net XSS vulnerability
Vulnerable URL: https://rusdate.net/promo/bannerhelper/728x90/recordvideo728x90.swf?clickTag=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 130893 VIP...
cnews.com.br XSS vulnerability
Open Bug Bounty ID: OBB-223363 Description| Value ---|--- Affected Website:| cnews.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
strojnistvo.com XSS vulnerability
Vulnerable URL: http://www.strojnistvo.com/modules/uploader/uploads/banners/flashbanners/petrastroji.swf?clickTAG=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...
adcash.com Open Redirect vulnerability
Vulnerable URL: https://www.adcash.com/ban/68666/OGgenericbanner728x90RU.swf?clickTAG=http://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 5853 VIP...
distrijob.fr Open Redirect vulnerability
Vulnerable URL: http://www.distrijob.fr/banner/img/metro1701.swf?clickTAG=http://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 150016 VIP website...
Rockstar Games: Table and Column Exposure
In this report, the researcher found an error message on our Careers page that exposed database table names. If an injection vulnerability had also existed there, this information could have helped an attacker carry out attacks. In response, we cleaned up the error message so that it still gives...
shopify-scripts: SIGABRT in sym_validate_len - symbol.c:44
File 2 as input causes a sigabrt in mruby. mruby raise an exception in symvalidatelen symbol.c:44 0 0x00000000005d3908 in raise 1 0x00000000005d3b3a in abort 2 0x0000000000415b52 in mrbexcraise mrb=, exc=... at /tmp/mruby/src/error.c:310 3 0x0000000000415c81 in mrbraise mrb=0x94fc10, c=, msg= at...
snafflz.com XSS vulnerability
Vulnerable URL: https://snafflz.com/page/pricelist Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1878636 VIP website status:| No Check snafflz.com SSL connection:| Grade: A Coordinated Disclosure Timeline:...
skynewsarabia.com XSS vulnerability
Vulnerable URL: http://www.skynewsarabia.com/web/search?q=%27%20onpageshow=alert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4685 VIP website status:| Yes Check skynewsarabia.com SSL...
Nextcloud: Design Issues on ( ███ ) Lead to show ( IPS of Users )
Hello , I know this Domain is maybe out of scope But it Connected to the main Website I have see it Cashable the Download IPS for Users Status. As I saw that You active statics awstats That show me Full access to Status on the website . POC...
mpaglobal.org XSS vulnerability
Vulnerable URL: http://www.mpaglobal.org/index.php?action=aboutus"alert/OPENBUGBOUNTY/...
assuredtelematics.com XSS vulnerability
Vulnerable URL: http://www.assuredtelematics.com/blog-details.php?id=834"alert/OPENBUGBOUNTY/...