fundailyfeed.com XSS vulnerability

Vulnerable URL:...

occasionshall.com XSS vulnerability

Vulnerable URL: http://occasionshall.com/users/editorialdisp.php?mn=" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7215574 VIP website status:| No Check...

thentilnow.com XSS vulnerability

Vulnerable URL: http://thentilnow.com/users/editorialdisp.php?mn=" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19760701 VIP website status:| No Check...

greghomeimprovement.com XSS vulnerability

Vulnerable URL: http://greghomeimprovement.com/users/editorialdisp.php?mn=" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

vegasbudgetdental.com XSS vulnerability

Vulnerable URL: http://vegasbudgetdental.com/users/editorialdisp.php?mn="=services Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13078653 VIP website...

harringtongeotechnical.com XSS vulnerability

Vulnerable URL: http://harringtongeotechnical.com/users/editorialdisp.php?mn="=clients Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

vistadelmarsenior.com XSS vulnerability

Vulnerable URL: http://vistadelmarsenior.com/users/editorialdisp.php?mn="=community Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15961428 VIP website...

bajafishgrill.net XSS vulnerability

Vulnerable URL: http://bajafishgrill.net/users/editorialdisp.php?mn="=aboutus Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

paytonsonedayfoundation.com XSS vulnerability

Vulnerable URL: http://paytonsonedayfoundation.com/users/editorialdisp.php?mn="=facts Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

websiteheads.com XSS vulnerability

Vulnerable URL: http://websiteheads.com/users/editorialdisp.php?mn="=smart Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7967664 VIP website status:| No...

eliteshooters.com XSS vulnerability

Vulnerable URL: http://eliteshooters.com/users/editorialdisp.php?mn="=about Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 24886024 VIP website status:| N...

drempelvrij.nl XSS vulnerability

Vulnerable URL: http://www.drempelvrij.nl/zoekresultaten?zoekterm=%22%20onfocus=alertOPENBUGBOUNTY%20autofocus%20%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2485277 VIP...

OWOX, Inc.: Subdomain Takeover on OWOX.RU

Subdomain http://www.owox.ru/ was preserved from being taken over by an attacker: https://kiosk.owox.ru/ https://blog.owox.ru/...

expansion.com XSS vulnerability

Vulnerable URL: http://www.expansion.com/ultimahora/index.html?year=alert'OPENBUGBOUNTY';...

ymcatraining.org.uk XSS vulnerability

Vulnerable URL: http://www.ymcatraining.org.uk/search-results.php?freetext=" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1889032 VIP website status:| N...

Pornhub: IDOR - disclosure of private videos - /api_android_v3/getUserVideos

An API endpoint exposed private video links when a user added the video to their profile favourites. An API endpoint allowed to obtain a link to any private video by adding it to ones profile favourites. Check out the infrastructure monitoring platform BugLabs.me for bounty hunters -...

stickees.com XSS vulnerability

Vulnerable URL: http://www.stickees.com/?s=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1644418 VIP website...

GitLab: State filter in IssuableFinder allows attacker to delete all issues and merge requests

Vulnerability details The state filter in the IssuableFinder class has the ability to filter issues and merge requests by state. This filter is implemented by calling publicsend with unfiltered user input. This allows an attacker to call deleteall or destroyall. Because the method is called befor...

U.S. Dept Of Defense: SQL Injection vulnerability on a DoD website

A Department of Defense webserver was vulnerable to a SQL injection attack that could have revealed sensitive financial information. korprit was able to demonstrate this vulnerability by crafting a specially formatted URL. Thanks korprit!...

funny-games.biz XSS vulnerability

Vulnerable URL: http://www.funny-games.biz/searchadultres.html?searchstring=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...