kennelgear.com XSS vulnerability

Vulnerable URL: http://www.kennelgear.com/searchresults.php?search="'...

processnms.com XSS vulnerability

Vulnerable URL: http://www.processnms.com/blog.php?search="'...

Discourse: XSS in topics because of bandcamp preview engine vulnerability

Load http://try.discourse.org 2. Click "New topic" 3. Enter this payload https://89.223.28.48/bandcamp.com/album/index.html?XSSa2 to field with placeholder "Type title or paste a link here" 4. Wait for the preview engine to parse the link 4. XSS will fire F151439 You should sanitize external...

ghanaweb.com Open Redirect vulnerability

Vulnerable URL: http://www.ghanaweb.com/GhanaHomePage/search.php?Search=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 1990 VIP website status:| Yes Coordinated...

Airbnb: [airbnb.com] XSS via Cookie flash

By corrupting the value of a cookie on the airbnb.com domain, bobrov was able to execute an XSS payload. Because cookies cannot be set cross-domain, this did require another vulnerability to be exploitable. Furthermore, because of CSP, this was only exploitable in Internet Explorer 11. The issue...

orbitz.com XSS vulnerability

Vulnerable URL: https://www.orbitz.com/user/forgotpassword Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2673 VIP website status:| Yes Check orbitz.com SSL connection:| Grade: A Coordinated Disclosure Timeline:...

curriebrown.com XSS vulnerability

Vulnerable URL: http://www.curriebrown.com/newsitem.php?id=133%27"--!confirmOPENBUGBOUNTY%3C/script /K/' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1129449 VIP website status:|...

bet.com Open Redirect vulnerability

Vulnerable URL: http://www.bet.com/searchresults.html?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 7313 VIP website status:| Yes Check bet.com SSL connection:| Grad...

alexa.com XSS vulnerability

Vulnerable URL: http://www.alexa.com/find-similar-sites?" Details: Description| Value ---|--- Patched:| Yes, at 17.01.2017 Latest check for patch:| 17.01.2017 21:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1804 VIP website status:| Yes Coordinated...

fightinggames.org XSS vulnerability

Vulnerable URL: http://www.fightinggames.org/search.php?t=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2192853 VIP website...

majestic.com XSS vulnerability

Vulnerable URL: https://majestic.com/plans-pricing?country=RU=GBP" Details: Description| Value ---|--- Patched:| Yes, at 17.03.2017 Latest check for patch:| 17.03.2017 07:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6895 VIP website status:| Yes Check...

megagroup.ru XSS vulnerability

Vulnerable URL: http://megagroup.ru/mailing?" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 10:03 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 44633 VIP website status:| Yes Check megagroup.ru SSL...

cinema-concorde-pam.fr XSS vulnerability

Vulnerable URL: http://cinema-concorde-pam.fr/FR/cine-search?search=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

ownCloud: bug reporting template encourages users to paste config file with passwords

The dangerous bug reporting template ============================= The github bug reporting template for owncloud's server and some apps contains this: The content of config/config.php: If you have access to your command line run e.g.: sudo -u www-data php occ config:list system from within your...

help.eurostar.com XSS vulnerability

Vulnerable URL: https://help.eurostar.com/email?lang='-alert'OPENBUGBOUNTY'-' Details: Description| Value ---|--- Patched:| Yes, at 03.11.2017 Latest check for patch:| 03.11.2017 16:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

Nextcloud: bug reporting template encourages users to paste config file with passwords

The dangerous bug reporting template ============================= The github bug reporting template for nextcloud's server and some apps contains this: The content of config/config.php: If you have access to your command line run e.g.: sudo -u www-data php occ config:list system from within your...

igiworldwide.com XSS vulnerability

Vulnerable URL: http://www.igiworldwide.com/verify.php?r="-alert'OPENBUGBOUNTY'-" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 385073 VIP website status:| No Check igiworldwide.c...

fandm.edu XSS vulnerability

Vulnerable URL: https://www.fandm.edu/search?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 150226 VIP website status:| No Check fandm.edu SSL connection:| Grade: B+ Coordinate...

niglist.com XSS vulnerability

Vulnerable URL: http://www.niglist.com/search.php?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 489715 VIP website status:| No Check niglist.com SSL connection:| Grade: A...

youtubemp3download.org XSS vulnerability

Vulnerable URL: http://youtubemp3download.org/search.php?q=%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22OPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 99672 VIP website status:| No Coordinated...