20626 matches found
leclere-mdv.com XSS vulnerability
Vulnerable URL: http://www.leclere-mdv.com/html/recherche.jsp?r=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E==true Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...
promod.fr XSS vulnerability
Vulnerable URL: http://www.promod.fr/femme/recherche/collection?query="-alert"OPENBUGBOUNTY"-" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 41491 VIP website status:| Yes Check promod.fr SSL connection:| Grade...
v7.lesbians247.com XSS vulnerability
Vulnerable URL: http://v7.lesbians247.com/?nats=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27;%3EMTA0MzguMTcuNDIuMTQ5LjEwLjAuMC4wLjA Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 15:28 GMT Vulnerability type:| XSS Vulnerability...
naomiteen.com XSS vulnerability
Vulnerable URL: http://www.naomiteen.com/t1/?nats=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27;%3EMTcxOS4yNS4zMC4xMTcuMS4wLjAuMC4w Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 15:27 GMT Vulnerability type:| XSS Vulnerability...
megansweets.com XSS vulnerability
Vulnerable URL: http://www.megansweets.com/t1/?nats=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27;%3EMTcxOS4yNS4zLjIxLjEuMC4wLjAuMA Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 15:27 GMT Vulnerability type:| XSS Vulnerability...
Yelp: One of yelp.com url is redirecting to domain which is not yet purchased
One of yelp.com url is redirecting to domain which is not yet purchased, so anyone would buy that domain and host any stuff which yelp.com does not support. A malicious user can take advantage of this and send the link to users, and people will it is secured domain as link originates from yelp.co...
Open-Xchange: SSL Certification Expired And TLS Vulnerability
I Found SSL Certification Expired at https://licenses.dovecot.fi/ I Found Vulnerability CVE-2016-2183 lists.dovecot.fi CVE-2016-2183 Description : A flaw was found in the way the DES/3DES cipher was used as part of the TLS/SSL protocol. A man-in-the-middle attacker could use this flaw to recover...
anzspot.anz.co.id XSS vulnerability
Vulnerable URL: http://anzspot.anz.co.id/en/anz-spot/detail/hemat-15-untuk-makanan-minuman?category=all=prompt/OPENBUGBOUNTY/...
siliwangi.mil.id XSS vulnerability
Vulnerable URL: http://siliwangi.mil.id/KirimKomentar?stat=kirprompt/OPENBUGBOUNTY/...
infospace.wufoo.com XSS vulnerability
Vulnerable URL: https://infospace.wufoo.com/validation/redirect.php?redirect=https://www.openbugbounty.org/'"--!alert/OPENBUGBOUNTY/...
avicena.uned.es XSS vulnerability
Vulnerable URL: http://avicena.uned.es/avl/search/view.php?field=course=83'"--!alert/OPENBUGBOUNTY/...
tieronejobs.com XSS vulnerability
Vulnerable URL: http://tieronejobs.com/jobs.php?q=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 24676240 VIP website status:| No Check...
Slack: Stealing xoxs-tokens using weak postMessage / call-popup redirect to current team domain
@fransrosen discovered a vulnerability which would allow an attacker running a malicious site to steal XOXS tokens. We resolved the postMessage and call-popup redirect issues, and performed a thorough investigation to confirm that this had never been exploited. Thanks @fransrosen for an interesti...
opensourceshakespeare.org XSS vulnerability
Vulnerable URL: http://www.opensourceshakespeare.org/concordance/wordformlist.php?Letter=Q'"--!confirmOPENBUGBOUNTY...
U.S. Dept Of Defense: Insecure Direct Object Reference (IDOR) vulnerability in a DoD website
A Department of Defense website was vulnerable to an IDOR attack which may allow an attacker to modify web content or certain database parameters. @eugui was able to demonstrate this vulnerability by manipulating web objects in a clever way. Very well done. Thank you!...
VK.com: Воскрешение сессии после сброса сессий / смены пароля / принудительной смены пароля
Восстановление сессии после сброса в течение короткого времени. После потери доступа к аккаунту смена пароля, etc в течении некоторого времени можно было проникнуть обратно на аккаунт, используя предварительно сгенерированный хэш для аутентификации пользователя...
anzspot.anz.co.id XSS vulnerability
Vulnerable URL: http://anzspot.anz.co.id/en/anz-spot/detail/hemat-15-untuk-makanan-minuman?category=allprompt/OPENBUGBOUNTY/...
dev.cbn.net.id XSS vulnerability
Vulnerable URL: http://dev.cbn.net.id/cbweb/clients.aspx?x=Home=Clients=K-O=nbr=2 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...