rammstein.de XSS vulnerability

Vulnerable URL: https://www.rammstein.de/de/newsletter/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 25.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 88753 VIP website status:| No Coordinated Disclosure...

udo-lindenberg.de XSS vulnerability

Open Bug Bounty ID: OBB-297735 Description| Value ---|--- Affected Website:| udo-lindenberg.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

def-shop.com XSS vulnerability

Vulnerable URL: https://www.def-shop.com/newsletter.php?alert/OPENBUGBOUNTY/...

def-shop.com XSS vulnerability

Vulnerable URL: https://www.def-shop.com/newsletter.php?alert/OPENBUGBOUNTY/...

Did you see what the Black Hat newsletter said about Trend Micro?

This year’s Black Hat® conference is right around the corner. Now, amazingly, in its 20th year, Black Hat is one of the world’s top gathering of information security professionals. Friends in the industry refer to this as “Security Summer Camp” and it’s true, between the training, briefings,...

newsletter.visitgrandjunction.com XSS vulnerability

Vulnerable URL: http://newsletter.visitgrandjunction.com/unsubscribe.php?segmentid=1"...

WordPress Newsletter Supsystic Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in Wordpress Newsletter Supsystic, which stems from an error...

WordPress Newsletter Supsystic Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in Wordpress Newsletter Supsystic version 1.1.7 due to an error...

WordPress Newsletter Supsystic 1.1.7 Cross Site Scripting Vulnerability

WordPress Newsletter Supsystic plugin version 1.1.7 suffers from a cross site scripting vulnerability. Document Title: =============== Wordpress Newsletter Supsystic 1.1.7 - Cross Site Scripting Vulnerability Vulnerability Class: ==================== Cross Site Scripting - Non Persistent Product ...

Lufthansa AG - (Limbo) Open Redirect Web Vulnerability

Document Title: =============== Lufthansa AG - Limbo Open Redirect Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2060 LHPROD-66558 COM-1036050 Release Date: ============= 2017-05-23 Vulnerability Laboratory ID VL-ID:...

WordPress Newsletter Supsystic 1.1.7 Cross Site Scripting

Document Title: =============== Wordpress Newsletter Supsystic 1.1.7 - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2070 Release Date: ============= 2017-05-16 Vulnerability Laboratory ID VL-ID:...

Newsletter by Supsystic - Authenticated Stored XSS & CSRF

Despite what the original advisory states, the affected POST parameter is "label". The CSRF issue was fixed in version 1.1.8, however, the Plugin still did not validate or output encode the "label" parameter...

Lufthansa AG - (Limbo) Open Redirect Web Vulnerability

Document Title: =============== Lufthansa AG - Limbo Open Redirect Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2060 LHPROD-66558 COM-1036050 Release Date: ============= 2017-05-22 Vulnerability Laboratory ID VL-ID:...

Nextcloud: IDOR unsubscribe Anyone from NextClouds Newsletters by knowing their Email

Hi Team, I Was Looking around your website and then I found a subdomain newsletter.nextcloud.com on the main page it shows us 3 Options i choose 1st that was Subscribe to our newsletter , Then I click on this Option and I was Taken to https://newsletter.nextcloud.com/?p=subscribe&id=1 The page...

Starbucks: Host header injection/redirection via newsletter signup

Good evening, There's a host header injection vulnerability via all newsletter signups in the referrer attribute. This works with all pages that have "Join our email list" signup boxes. Since the referrer attribute can be changed to an outside domain the email being received redirects all links...

EELV Newsletter < 4.6.1 - CSRF & XSS

The EELV Newsletter WordPress plugin was affected by a CSRF & XSS security vulnerability...

Wordpress EELV Newsletter Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability in the s value of the Wordpress EELV Newsletter page allows remote attackers to exploit...

Wordpress EELV Newsletter Cross-Site Request Forgery Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the delgroupe parameter of addressbook on the Wordpress EELV Newsletter...

WordPress EELV Newsletter 4.5 XSS / CSRF Vulnerabilities

Exploit for php platform in category web applications Document Title: =============== Wordpress EELV Newsletter v4.5 - Multiple Vulnerabilities Product & Service Introduction: =============================== Add a registration form on FrontOffice, a newsletter manager on backoffice manage skins,...

WordPress EELV Newsletter 4.5 XSS / CSRF

Document Title: =============== Wordpress EELV Newsletter v4.5 - Multiple Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2069 Release Date: ============= 2017-05-15 Vulnerability Laboratory ID VL-ID: ====================================...