CVE-2020-28401

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access WIP details about jobs he should not have access to...

Star Computer Star Practice Management Web 访问控制错误漏洞

Star Computer Star Practice Management Web is a web service used for time-based billing by Star Computer, a UK-based company. The vulnerability can be exploited to access the WIP details of unauthorized jobs...

ASB-A-142125338

In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

comune.prezza.aq.it Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1151172 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting comune.prezza.aq.it...

CVE-2019-18465

MOVEit Transfer 11.1 (pre-11.1.3) contains a vulnerability that could allow an attacker to sign in without full credentials via the SSH (SFTP) interface, applicable only to specific SSH/SFTP configurations and when the MySQL database is used. The connected documents do not provide explicit exploi...

emd3genealogy.com XSS vulnerability

Vulnerable URL: http://www.emd3genealogy.com/browsemedia.php?mediasearch=bug=headstones=Relatives=%22%20autofocus%20onfocus=alert%60OPENBUGBOUNTY%60%20 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 17.01.2018 Vulnerability type:| XSS Vulnerability...

alabama-bound.info XSS vulnerability

Vulnerable URL: http://www.alabama-bound.info/browsemedia.php?mediasearch=bug=headstones=Relatives=%22%20autofocus%20onfocus=alert%60OPENBUGBOUNTY%60%20 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerabilit...

rumseyfamily.com XSS vulnerability

Vulnerable URL: http://www.rumseyfamily.com/browsemedia.php?mediasearch=bug=headstones=Relatives=%22%20autofocus%20onfocus=alert%60OPENBUGBOUNTY%60%20 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability...

ancestry.smithplanet.com XSS vulnerability

Vulnerable URL: http://ancestry.smithplanet.com/browsemedia.php?mediasearch=bug=headstones=Relatives=%22%20autofocus%20onfocus=alert%60OPENBUGBOUNTY%60%20 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 15.01.2018 Vulnerability type:| XSS...

startup.ch XSS vulnerability

Vulnerable URL: https://www.startup.ch/index.cfm?CFID=594422432=59757374=129382id=8758=1295" Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 350262 VIP website...

screenshot.com.ua Open Redirect vulnerability

Vulnerable URL: http://screenshot.com.ua/go.cgi?url=http://https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 6974068 VIP...

ssa.biznizhub.com XSS vulnerability

Vulnerable URL: https://ssa.biznizhub.com/index.php?msg=Report By Victor Burgos find XSS Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...

community.taskque.com XSS vulnerability

Vulnerable URL: http://community.taskque.com/email/[email protected]%27%22%3E%3Csvg/onload=alert/openbugbounty/%3E&cfwaftk=012631002hR-5KpObPuXjNVMDchkbuGGpUw Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018...

doccafe.com XSS vulnerability

Vulnerable URL: https://www.doccafe.com/search-jobs.php Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 250917 VIP website status:| No Coordinated Disclosure...

reifenvertrieb-seng.eu XSS vulnerability

Vulnerable URL: http://www.reifenvertrieb-seng.eu/flashdetection.swf?flashContentURL=javascript:alert5389 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

sandsglendale.com XSS vulnerability

Vulnerable URL: http://www.sandsglendale.com/VehicleSearchResults?bodyType=TRUCK--%3E%3C/Script%3E%3CImage%20SrcSet=K%20/;%20OnError=confirm%60openbugbounty%60%20//%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| X...

kenoragm.com XSS vulnerability

Vulnerable URL: http://www.kenoragm.com/VehicleSearchResults?bodyType=SUV=100000:2147483647=new=GMC=-2147483648:2147483647=2%3C!%27/%22/%27/%22/--%3E%3C/Script%3E%3CImage%20SrcSet=K%20/;%20OnError=confirm%60openbugbounty%60%20//%3E Details: Description| Value ---|--- Patched:| Verification in...

transmission.no XSS vulnerability

Vulnerable URL: http://www.transmission.no/flashdetection.swf?flashContentURL=javascript:alert5389 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

kunsthiem.nl XSS vulnerability

Vulnerable URL: http://kunsthiem.nl/flashdetection.swf?flashContentURL=javascript:alert5389 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

milanesi.nl XSS vulnerability

Vulnerable URL: http://www.milanesi.nl/Album%20Creator/shamu/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...