er4.dk Cross Site Scripting vulnerability

Security Researcher bill Helped patch 52 vulnerabilities Received 2 Coordinated Disclosure badges Received 2 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting er4.dk website and its users. Following coordinated and...

Siemens Multiple Devices Profinet DCP Denial of Service

Binary data 720111.prm...

netbutik.fdm.dk XSS vulnerability

Open Bug Bounty ID: OBB-656876 Description| Value ---|--- Affected Website:| netbutik.fdm.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kampmann-dk.dk XSS vulnerability

Open Bug Bounty ID: OBB-645239 Description| Value ---|--- Affected Website:| kampmann-dk.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

med24.dk XSS vulnerability

Open Bug Bounty ID: OBB-616173 Description| Value ---|--- Affected Website:| med24.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hoejlund65-91.dk XSS vulnerability

Open Bug Bounty ID: OBB-550898 Description| Value ---|--- Affected Website:| hoejlund65-91.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

med24.dk XSS vulnerability

Open Bug Bounty ID: OBB-550185 Description| Value ---|--- Affected Website:| med24.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

s48.dk XSS vulnerability

Open Bug Bounty ID: OBB-472748 Description| Value ---|--- Affected Website:| s48.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

club300.dk XSS vulnerability

Vulnerable URL: http://www.club300.dk/articles.php?ua=show%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E=84 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1599435 VIP website...

kolding24.dk Open Redirect vulnerability

Vulnerable URL: http://kolding24.dk/?adsclick=1=564-563-561-560-2=051cf92431=http%3A%2F%2Fopenbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 21:18 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed...

kino1-2.dk XSS vulnerability

Vulnerable URL: http://www.kino1-2.dk/sites/all/modules/cinema/cinema/show-movie-trailer.php?id=191826683"';--=820=470=true Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

bio12345.dk XSS vulnerability

Vulnerable URL: http://www.bio12345.dk/sites/all/modules/cinema/cinema/show-movie-trailer.php?id=223136269"';--=820=470=true Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4348277...

Siemens devices using the PROFINET Discovery and Configuration Protocol (Update F)

CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit. Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Denial of Service UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory...

Siemens PROFINET DCP (Update V)

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION : Exploitable from an adjacent network/low attack complexity Vendor : Siemens Equipment : Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerabilities : Uncontrolled Resource Consumption 2. UPDATE INFORMATION This updated advisory...

spar30.dk XSS vulnerability

Vulnerable URL: http://www.spar30.dk/soegTilbud.php?show=konkretsoegning=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 238616...

cam4.dk XSS vulnerability

Vulnerable URL: http://www.cam4.dk/paygate?contextual=gifts-female"=ppgi=en=296857270=basic=basic-noprice=5=1=true Details: Description| Value ---|--- Patched:| Yes, at 25.11.2015 Latest check for patch:| 25.11.2015 09:03 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

CVE-2014-6827

The DK ONLINE Beta aka com.sgmobile.dkonline application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The DK ONLINE Beta aka com.sgmobile.dkonline application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6827

The DK ONLINE Beta aka com.sgmobile.dkonline application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6827

The CVE-2014-6827 entry involves the DK ONLINE Beta Android app (com.sgmobile.dkonline) version 1.0.2 where SSL servers’ X.509 certificates are not verified. This allows MITM attackers to spoof servers and read sensitive data via crafted certificates. The publicly available data confirms the vuln...