kapook.com XSS vulnerability

Vulnerable URL: http://www.kapook.com/webout.php?view="// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1511 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability...

onlinewebfonts.com XSS vulnerability

Vulnerable URL: https://www.onlinewebfonts.com/search?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22369 VIP website status:| Yes Check onlinewebfonts.com SSL connection:|...

tenshoku.mynavi.jp XSS vulnerability

Vulnerable URL: http://tenshoku.mynavi.jp/entry/index.cfm?fuseaction=alert'OPENBUGBOUNTY';...

LocalTapiola: Disclosure of IBM Websphere page

while testing i found that ibm websphere page was disclosed and also server version is 8.5.5 which is older version Poc- go to https://verkkopalvelu.tapiola.fi/a1/ as general practice such pages should not be disclosed...

Pushwoosh: Read Application Name , Subscribers Count

Attacker was able to read app name and subscribers count...

map.meta.ua XSS vulnerability

Vulnerable URL: http://map.meta.ua/?map="alert/OPENBUGBOUNTY/...

U.S. Dept Of Defense: Local File Inclusion vulnerability on an Army system allows downloading local files

A misconfigured Army website may have allowed unauthorized users to remotely download local files, potentially revealing sensitive system or user information. Nahamsec was able to demonstrate this vulnerability by crafting a particularly formatted URL. Thanks Nahamsec!...

hitchbase.com XSS vulnerability

Vulnerable URL: http://www.hitchbase.com/suche.php?LANG=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

www1.workday.com XSS vulnerability

Vulnerable URL: https://www1.workday.com/en-se/company/newsroom/press-releases/press-release-details.html?id=%27%22%3E%3C/Script/K%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E Details: Description| Value ---|--- Patched:| Yes, at 10.01.2017 Latest check for patch:| 10.01.2017 17:25 GMT Vulnerability...

wpengine.com XSS vulnerability

Vulnerable URL: https://wpengine.com/blog/?lol" Details: Description| Value ---|--- Patched:| Yes, at 29.11.2016 Latest check for patch:| 29.11.2016 14:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2287 VIP website status:| Yes Coordinated Disclosure...

feedback-form.truste.com XSS vulnerability

Vulnerable URL: https://feedback-form.truste.com/watchdog/request?url=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 22:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

filehippo.com XSS vulnerability

Vulnerable URL: http://filehippo.com/info/contact/ Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 22:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 580 VIP website status:| Yes Coordinated Disclosure...

tyra.com XSS vulnerability

Vulnerable URL: https://tyra.com/www/en/us/search?q=';alertOPENBUGBOUNTY;var x=// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 289602 VIP website status:| No Check tyra.com SSL...

hk.wgw.interactivebrokers.com XSS vulnerability

Vulnerable URL: https://hk.wgw.interactivebrokers.com/webtrader/redirect.jsp?regionalURL="alert'OPENBUGBOUNTY'...

ch.wgw.interactivebrokers.com XSS vulnerability

Vulnerable URL: https://ch.wgw.interactivebrokers.com/webtrader/redirect.jsp?regionalURL="alert'OPENBUGBOUNTY'...

selling.autotrader.co.uk XSS vulnerability

Vulnerable URL: https://selling.autotrader.co.uk/technical-difficulty?return-to=/find-car/bj13n"kco6h Details: Description| Value ---|--- Patched:| Yes, at 03.03.2017 Latest check for patch:| 03.03.2017 14:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

Pornhub: Race Condition Vulnerability On Pornhubpremium.com

The researcher discovered a race condition which allowing for gift code reuse across using multiple accounts to gain Premium access. I was able to create unlimted accounts and redeem already used gift cards to give the accounts as many days of subscription as I wanted to which could then be used ...

sarpsborg.com XSS vulnerability

Vulnerable URL: https://sarpsborg.com/globalassets/?nsextt=%27"--...

m.enterthehealingschool.org XSS vulnerability

Vulnerable URL: http://m.enterthehealingschool.org/unsubscribe/index.php?c=%22%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...

leif-daland.com XSS vulnerability

Vulnerable URL: http://www.leif-daland.com/feed2js/stylepreview.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 28475426 VIP website status:| No Check leif-daland.com SSL...