israbox.life XSS vulnerability

Vulnerable URL: http://www.israbox.life/get/index.php?go=" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 26206 VIP website status:| Yes Check israbox.lif...

Mail.ru: [ml.money.mail.ru] Open Redirect

PoC Только для неавторизованных пользователей без cookie Mpop https://ml.money.mail.ru//blackfan.ru HTTP Response HTTP/1.1 302 ... Location: //blackfan.ru?dmrrefresh=1...

shopify-scripts: Heap Overflow in mrb_arb_splice

It's similar with 192235, but the root cause is different. both of mruby and mruby-engine are crashed by the following PoC. MRBINT64 ruby ary = Array.new1023 ary0x7ffffffffffffc00,0 = Array.new1024 $ gdb -q --args ./bin/mruby test2.rb Reading symbols from ./bin/mruby...done. gdb r Starting progra...

casioca.com XSS vulnerability

Vulnerable URL: http://www.casioca.com/search?findkeywords=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1256945 VIP website status:| No Check casioca.com SSL connection:| Grade...

diyoutube.com XSS vulnerability

Vulnerable URL: http://diyoutube.com/search/%22%3E%3C/script%3E%3Cimg-src=x-onerror=prompt/xssposed/%3E.html Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

OLX: olx.ph is vulnerable to POODLE attack

https://www.olx.ph supports SSLv3 and hence is vulnerable to POODLE attack, which is a kind of Man in the middle attack. This vulnerability was discovered in 2014 by GoogleMore Information below: https://security.googleblog.com/2014/10/this-poodle-bites-exploiting-ssl-30.html...

sexybegin.nl XSS vulnerability

Vulnerable URL: http://sexybegin.nl/zoek.php?frmzoek=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

bmfautoparts.com XSS vulnerability

Vulnerable URL: http://www.bmfautoparts.com/Part-Search.aspx?SearchStr=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4177463 VIP website status:| No...

labarousse.entmip.fr XSS vulnerability

Vulnerable URL: http://labarousse.entmip.fr/sg.do Details: Description| Value ---|--- Patched:| Yes, at 03.03.2017 Latest check for patch:| 03.03.2017 11:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

gers.entmip.fr XSS vulnerability

Vulnerable URL: http://gers.entmip.fr/sg.do Details: Description| Value ---|--- Patched:| Yes, at 03.03.2017 Latest check for patch:| 03.03.2017 11:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...

cv-library.co.uk XSS vulnerability

Vulnerable URL: https://www.cv-library.co.uk/cgi-bin/password.cgi Details: Description| Value ---|--- Patched:| Yes, at 22.03.2017 Latest check for patch:| 22.03.2017 09:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10184 VIP website status:| Yes Check...

U.S. Dept Of Defense: SQL Injection vulnerability in a DoD website

A Department of Defense webserver was vulnerable to a SQL injection attack that could have revealed sensitive information. @korprit was able to demonstrate this vulnerability by crafting specially formatted URLs. Thanks @korprit!...

imel.ba XSS vulnerability

Vulnerable URL: http://www.imel.ba/?s=%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1179634 VIP website status:| No Check...

tebaidu.com XSS vulnerability

Vulnerable URL: http://www.tebaidu.com/search.asp?wd=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=0 Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

funpers.com XSS vulnerability

Vulnerable URL: http://funpers.com/64060 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1397822 VIP website status:| No Check funpers.com SSL connection:| Grade: F Coordinated...

indiacom.com XSS vulnerability

Vulnerable URL:...

cfao-automotive.com XSS vulnerability

Vulnerable URL: http://www.cfao-automotive.com/fr/chercher?query="" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1145608 VIP website status:| No Check cfao-automotive.com SSL...

luyenthidaminh.vn XSS vulnerability

Vulnerable URL: http://luyenthidaminh.vn/search/%22%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1318708 VIP...

U.S. Dept Of Defense: Server side information disclosure on a DoD website

A misconfigured Department of Defense webserver improperly disclosed application information. @sulemanmalik03 was able to demonstrate this vulnerability by crafting specially formatted URLs...

royaleboost.com XSS vulnerability

Vulnerable URL: https://www.royaleboost.com/login/ Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10440326 VIP website status:| No Check royaleboost.com S...