seowhy7.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-185366 Description| Value ---|--- Affected Website:| seowhy7.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

ar15.com XSS vulnerability

Vulnerable URL: http://www.ar15.com/about/help.html?error=5" Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 18:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5999 VIP website status:| Yes Check ar15.com S...

Microsoft Windows 8.1 Update 2 / 10 10586 (x86/x64) - NtLoadKeyEx User Hive Attachment Point Privilege Escalation (MS16-111)

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=865 Windows: NtLoadKeyEx User Hive Attachment Point EoP Platform: Windows 10 10586 32/64 and 8.1 Update 2, not tested Windows 7 Class: Elevation of Privilege Summary: The NtLoadKeyEx system call allows an unprivileged user to loa...

mw1950.com XSS vulnerability

Vulnerable URL: http://mw1950.com/search/?q=请输入关键词=1=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13605 VIP website status:| Yes Check mw1950.com SSL connection:| Grade: F Coordinated Disclosure...

lawyer.110.com XSS vulnerability

Open Bug Bounty ID: OBB-183441 Description| Value ---|--- Affected Website:| lawyer.110.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

ghadir2016.com XSS vulnerability

Vulnerable URL: http://ghadir2016.com/users/signup.php?utype=admin" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3755019 VIP website status:| No Check ghadir2016.com SSL connection:| Grade: A Coordinated...

iiec2017.com XSS vulnerability

Vulnerable URL: http://iiec2017.com/users/signup.php?utype=admin" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3346691 VIP website status:| No Check...

f1000.com XSS vulnerability

Vulnerable URL: http://f1000.com/prime/search/faculty?query=" Details: Description| Value ---|--- Patched:| Yes, at 08.01.2017 Latest check for patch:| 08.01.2017 14:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 99205 VIP website status:| No Check f1000.com...

Ali wangwang 2010 remote code execution vulnerability

漏洞复现 阿里旺旺2010版本的ImageMan.dll动态链接库中，有一个COM接口负责处理图片信息，其中有一个函数AutoPic存在漏洞，当在html中加载这个COM接口，并传入特殊字符串时，会由于对字符串长度没有进行检查，在拷贝时读取到不可用地址，从而导致程序进入SEH异常处理，通过超长payload可以覆盖SEH指针从而达到eip可控的效果，下面对此漏洞进行详细分析。 首先安装阿里旺旺2010，之后用IE打开，发现IE崩溃，通过附加windbg，可以到达漏洞崩溃位置。 a5c.628: Access violation - code c0000005 first chance...

forever21.com XSS vulnerability

Open Bug Bounty ID: OBB-182080 Description| Value ---|--- Affected Website:| forever21.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

blog.java1234.com XSS vulnerability

Open Bug Bounty ID: OBB-180291 Description| Value ---|--- Affected Website:| blog.java1234.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

szzs360.com XSS vulnerability

Vulnerable URL: http://www.szzs360.com/news/search.asp?words=%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1096697 VIP...

kulr8.com XSS vulnerability

Open Bug Bounty ID: OBB-178677 Description| Value ---|--- Affected Website:| kulr8.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

abc6.com XSS vulnerability

Open Bug Bounty ID: OBB-178613 Description| Value ---|--- Affected Website:| abc6.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

nbc-2.com XSS vulnerability

Open Bug Bounty ID: OBB-178596 Description| Value ---|--- Affected Website:| nbc-2.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

newson6.com XSS vulnerability

Open Bug Bounty ID: OBB-178585 Description| Value ---|--- Affected Website:| newson6.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

nbc12.com XSS vulnerability

Open Bug Bounty ID: OBB-178557 Description| Value ---|--- Affected Website:| nbc12.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

wave3.com XSS vulnerability

Open Bug Bounty ID: OBB-178535 Description| Value ---|--- Affected Website:| wave3.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

kfvs12.com XSS vulnerability

Open Bug Bounty ID: OBB-178525 Description| Value ---|--- Affected Website:| kfvs12.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

kait8.com XSS vulnerability

Open Bug Bounty ID: OBB-178515 Description| Value ---|--- Affected Website:| kait8.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...