regro.at XSS vulnerability

Vulnerable URL: http://www.regro.at/cms.php?sid=fn4r096oivnl7ceuk66r1vkv83=/cms.php?searchString=ergebnisse=...

ljudfokus.se XSS vulnerability

Vulnerable URL: http://www.ljudfokus.se/showseek.php?searchstring=...

service-crimea.com XSS vulnerability

Vulnerable URL: http://service-crimea.com/index.php?searchstring=...

autofiat.perm.ru XSS vulnerability

Vulnerable URL: http://autofiat.perm.ru/index.php?searchstring=...

clickz.com XSS vulnerability

Vulnerable URL: https://www.clickz.com/?geo=uk-europe" Details: Description| Value ---|--- Patched:| Yes, at 25.12.2017 Latest check for patch:| 25.12.2017 09:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 46952 VIP website status:| Yes Check clickz.com SSL...

micro-epsilon.com XSS vulnerability

Vulnerable URL: http://www.micro-epsilon.com/index.html?sLang=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check micro-epsilon.com SSL connection:| Grade: A-...

education.casio.com XSS vulnerability

Vulnerable URL: http://education.casio.com/search Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

OWOX, Inc.: Stored XSS at https://finance.owox.com/customer/accountList

XSS on finance.owox.com instance POC: 1 Login to zhe site 2 Go to the https://finance.owox.com/customer/accountList 3 You will be XSSed immediately. Reproduce steps: 1 Go to the https://finance.owox.com/customer/accountAdd Place in the username next payload: "alertdocument.cookie; 3 Go to the...

careers.sig.com XSS vulnerability

Vulnerable URL: https://careers.sig.com/mail-to-friend?title=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

f4.fss.ru XSS vulnerability

Vulnerable URL: http://f4.fss.ru/fss/office Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check f4.fss.ru SSL connection:| Grade: ...

Nextcloud: Reflected XSS in U2F plugin by shipping the example endpoints

While running a RIPS scan against our instrumentalized source code it noticed that the file /apps/twofactoru2f/vendor/yubico/u2flib-server/examples/localstorage/index.php echoes on user input: F145451 I was first a tad confused because the examples have been removed from our Git repository, but t...

travel.excite.co.uk XSS vulnerability

Vulnerable URL: http://travel.excite.co.uk/facebookConnect.php?locale="alert'OPENBUGBOUNTY';...

zoopla.co.uk XSS vulnerability

Vulnerable URL: http://www.zoopla.co.uk/to-rent/commercial/property/liverpool/'"--!...

hry.czin.eu XSS vulnerability

Vulnerable URL: http://hry.czin.eu/vyhledavani-her.php?searchstring=barbie...

U.S. Dept Of Defense: Remote code execution vulnerability on a DoD website

A remote code execution RCE vulnerability was found on a DoD website which could have enabled an attacker to execute remote commands on the web server. Thank you @korprit for notifying us of this vulnerability!...

oring.fr XSS vulnerability

Vulnerable URL: http://www.oring.fr/search.php?searchquery=151100...

icquartieremoretta.gov.it XSS vulnerability

Open Bug Bounty ID: OBB-198825 Description| Value ---|--- Affected Website:| icquartieremoretta.gov.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

comprensivogattinara.gov.it XSS vulnerability

Vulnerable URL: http://www.comprensivogattinara.gov.it/Cerca.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9725074 VIP website status:| No Check comprensivogattinara.gov.it SS...

farragutchamber.com XSS vulnerability

Vulnerable URL: http://www.farragutchamber.com/chamber/directoryresultskeyword.php?searchstring=" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16839169...

bagelbagel.jp XSS vulnerability

Vulnerable URL: http://www.bagelbagel.jp/shop/index.php?id= Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2420517 VIP website status:| No Check...