mediatheque.justice.gouv.fr XSS vulnerability

Vulnerable URL: http://www.mediatheque.justice.gouv.fr/static/player/player.swf?file=/fr/IMG/flv/aef2007-43.flv=promptopenbugbounty Details: Description| Value ---|--- Patched:| Yes, at 24.07.2017 Latest check for patch:| 24.07.2017 20:36 GMT Vulnerability type:| XSS Vulnerability status:| Public...

airservcorp.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://airservcorp.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

cathaybankcareers.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://cathaybankcareers.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

mcd.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://mcd.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

monsterhires.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://monsterhires.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

ohiochristianuniversity.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://ohiochristianuniversity.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

sagemcom.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://sagemcom.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:|...

picwic.mua.hrdepartment.com XSS vulnerability

Open Bug Bounty ID: OBB-210818 Description| Value ---|--- Affected Website:| picwic.mua.hrdepartment.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

uvic.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://uvic.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

victoriassecretcanada-pinkcanada.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://victoriassecretcanada-pinkcanada.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

yves-rocher-franchise.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://yves-rocher-franchise.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

zhi.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://zhi.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

U.S. Dept Of Defense: Cross-site request forgery (CSRF) vulnerability in a DoD website

A cross-site request forgery CSRF vulnerability was found on a Department of Defense website which could trick a web user into posting or changing confidential information, or redirecting sensitive information to the malicious user. @mantis was able to demonstrate this vulnerability by crafting a...

U.S. Dept Of Defense: SQL injection vulnerability on a DoD website

A Department of Defense website was vulnerable to a SQL injection attack which may allow an attacker to execute arbitrary SQL commands and expose sensitive data. @0xd0m7 was able to demonstrate this vulnerability by crafting a specially formatted URL...

U.S. Dept Of Defense: SQL Injection vulnerability in a DoD website

A Department of Defense webserver was vulnerable to a SQL injection attack that could have revealed sensitive information. @psychomantis was able to demonstrate this vulnerability by crafting a specially formatted URL. Thanks @psychomantis!...

U.S. Dept Of Defense: Privilege Escalation on a DoD Website

A Department of Defense website was exposed to a privilege escalation vulnerability, which could have allowed remote administrator access to the website. Thanks to @vagmour for discovering this vulnerability!...

U.S. Dept Of Defense: SQL Injection vulnerability in a DoD website

A Department of Defense webserver was vulnerable to a SQL injection attack that could have revealed sensitive information. @hassaan was able to demonstrate this vulnerability by crafting specially formatted URLs. Thanks @hassaan!...

Threat Outbreak Alert RuleID27117: Email Messages Distributing Malicious Software on January 9, 2017

Medium Alert ID: 52275 First Published: 2017 January 9 16:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27117 may contain the following files: Name |...

What Hack? Burlington Electric Speaks Out

Two days before the start of the New Year’s holiday weekend, the Department of Homeland Security shared technical details and indicators of compromise related to tools used by Russian intelligence services in attacks allegedly attempting to influence the U.S. presidential election. Dutifully, IT...

U.S. Dept Of Defense: Information disclosure vulnerability on a DoD website

A Department of Defense website was misconfigured in a manner that could have exposed sensitive information. Thank you @sp1d3rs for notifying us of this! It was a trivial Full Path Disclosure issue, but still worth reporting...