emarketer.com XSS vulnerability

Vulnerable URL: https://www.emarketer.com/articles/results.aspx?q=Email"onmouseover="alert/OPENBUGBOUNTY/" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 25318 VIP website status:|...

oxfordhomestudy.com XSS vulnerability

Vulnerable URL: http://www.oxfordhomestudy.com/search.php Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 14:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 332181 VIP website status:| No Coordinated...

yourtango.com IFRAME Injection vulnerability

Vulnerable URL: http://www.yourtango.com/content/search?searchapiaggregation1=" XANY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 12034 VIP website status:| Yes Chec...

U.S. Dept Of Defense: SQL injection vulnerability on a DoD website

A Department of Defense website was vulnerable to a SQL injection attack which may allow an attacker to execute arbitrary SQL commands and expose sensitive data. @vagmour was able to demonstrate this vulnerability by crafting a specially formatted URL. Thanks to @vagmour for discovering this...

filehippo.com XSS vulnerability

Vulnerable URL: http://filehippo.com/pl/search?q="alert/OPENBUGBOUNTY/...

psychologistworld.com XSS vulnerability

Vulnerable URL: https://www.psychologistworld.com/searchsite.php?q=...

mcdonalds.com IFRAME Injection vulnerability

Vulnerable URL: https://www.mcdonalds.com/us/en/errors/404.emailform.html?hidSendEmail=no=vega¤tPageTitle=404¤tPageUrl=http://www.mcdonalds.com/us/en/errors/404.html¤tPagePath=1=1" src= XANY Details: Description| Value ---|--- Patched:| Yes, at...

jobswitch.in XSS vulnerability

Vulnerable URL: http://www.jobswitch.in/joblisting?exp=5'"--!prompt/OPENBUGBOUNTY/...

tate.org.uk XSS vulnerability

Vulnerable URL: http://www.tate.org.uk/search?q=+%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E%22&site-search;= Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 14:09 GMT Vulnerability type:| XSS Vulnerability status:| Public...

thucphamtuoi.com.vn XSS vulnerability

Vulnerable URL: http://thucphamtuoi.com.vn/search/?qr=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 14:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

loreal.ca XSS vulnerability

Vulnerable URL: http://www.loreal.ca/LuceneSearchResult?SearchKey=alert'OPENBUGBOUNTY'...

simpsonspark.com XSS vulnerability

Vulnerable URL: http://www.simpsonspark.com/search.php?q= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 655180 VIP website status:| No Check simpsonspark.com SSL connection:| Grad...

drk.de XSS vulnerability

Vulnerable URL: https://www.drk.de/suche/?id=502kesearchpi1page=1kesearchpi1sword=test"alert/OPENBUGBOUNTY/...

chartsinfrance.net XSS vulnerability

Vulnerable URL: http://www.chartsinfrance.net/rechercher/index.php?q="ezfkopzep"...

vibrantmedia.com XSS vulnerability

Vulnerable URL: http://www.vibrantmedia.com/whatisIntelliTXT.asp?ipid=18923=us=x10hosting.us.intellitxt.com...

portal.mrwebsites.ca XSS vulnerability

Vulnerable URL:...

Uber: SMS URL verification link does not expire on phone number change and lacks rate limiting

When verifying your phone number attached to your Uber account, it was possible to re-use an old verification URL to validate a new cell phone number. In addition to this, there was no rate limiting on the SMS verification which allowed for it to be easily brute-forced. The internal team resolved...

U.S. Dept Of Defense: Information disclosure vulnerability on a DoD website

A Department of Defense website was misconfigured in a manner that could have exposed sensitive information. Thank you @jonbottarini for notifying us of this!...

U.S. Dept Of Defense: Critical information disclosure at https://█████████

Summary: There is a critical information disclosure at https://████████/rserver/rdPage.aspx?rdReport=dbDashboard&rdShowModes= Description: As you can see in the video the https://████████/rserver/rdPage.aspx?rdReport=dbDashboard&rdShowModes= loads a page with a debug this page functions enabled,...

belloscar.com.br XSS vulnerability

Vulnerable URL: http://www.belloscar.com.br/naoencontrou.php?textopesquisa==%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 10:15 GMT Vulnerability type:| XSS Vulnerability status:| Public...