storefront.unitednotions.com XSS vulnerability

Vulnerable URL: http://storefront.unitednotions.com/storefrontCommerce/search.do?searchType=keyword=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:06 GMT Vulnerability type:| XSS Vulnerability...

sm.ancestry.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-115053 Description| Value ---|--- Affected Website:| sm.ancestry.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

202.157.135.81 XSS vulnerability

Vulnerable URL: http://202.157.135.81/popup/emailenquirynews.cfm?address=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

CVE-2015-6618

Bluetooth in Android 4.4 and 5.x before 5.1.1 LMY48Z allows user-assisted remote attackers to execute arbitrary code by leveraging access to the local physical environment, aka internal bug 24595992...

CVE-2015-6620

Android libstagefright vulnerabilities in mediaserver allow local privilege escalation to Signature or SignatureOrSystem for devices running before 5.1.1 LMY48Z and before 2015-12-01 for 6.0. Root cause: flaws in libstagefright enabling memory/logic errors during crafted media processing. Impact ...

sv.wikiloc.com XSS vulnerability

Vulnerable URL: http://sv.wikiloc.com/wikiloc/find.do?q="';-- Details: Description| Value ---|--- Patched:| Yes, at 01.03.2016 Latest check for patch:| 01.03.2016 18:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 4 V...

dieteasily.com XSS vulnerability

Open Bug Bounty ID: OBB-114001 Description| Value ---|--- Affected Website:| dieteasily.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

students.washington.edu XSS vulnerability

Vulnerable URL: http://students.washington.edu/uwultima/playerBio.php?firstName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

app.rainbird.com.cn XSS vulnerability

Vulnerable URL:...

python-django, python2-django: information leakage

If an application allows users to specify an unvalidated format for dates and passes this format to the date filter, e.g. lastupdated|date:userdateformat , then a malicious user could obtain any secret in the application's settings by specifying a settings key instead of a date format. e.g...

sps.edu XSS vulnerability

Vulnerable URL: https://www.sps.edu/podium/default.aspx?t=52562=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:11 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

Ubiquiti Inc.: account.ubnt.com CSRF

Good Evening Sir, I want to inform you that i have successfully discovered a problem on the API django Restfull API you used to manage the security of https://account.ubnt.com The vulnerability type : CSRF Vulnerability description : An attacker create a web page with the code attached to this...

sg.se XSS vulnerability

Vulnerable URL: http://www.sg.se/en/"' Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 4 VIP website status:| No...

it.lovepedia.net XSS vulnerability

Vulnerable URL: http://it.lovepedia.net/login.php Details: Description| Value ---|--- Patched:| Yes, at 16.12.2015 Latest check for patch:| 16.12.2015 01:39 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 4 VIP website...

guests.met-art.com XSS vulnerability

Vulnerable URL: http://guests.met-art.com/search/%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E/ Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

mafengwo.cn XSS vulnerability

Vulnerable URL: http://www.mafengwo.cn/group/s.php?q="'--; Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2102 Google Pagerank| 7 VIP website status:| Yes...

fc-portois.fr XSS vulnerability

Vulnerable URL: http://www.fc-portois.fr//search/site/?q= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8460326 Google Pagerank| 1 VIP website status:| N...

turkey.adhoards.com XSS vulnerability

Vulnerable URL: http://turkey.adhoards.com/all/search/?filterbyprice=order=1bycategory=bykeywords=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2015 Latest check for patch:| 23.11.2015 20:29 GMT Vulnerability type:| XSS...

ecurieauto-chateaugaillard.com XSS vulnerability

Vulnerable URL: http://www.ecurieauto-chateaugaillard.com//search/site/?q= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

Serendipity 2.0.2 Cross Site Scripting

Date: 28/10/2015 Discovered by: Joel Vadodil Varghese Type of vulnerability: Stored XSS Tested on: Windows 8.1 Product: Serendipity Version: 2.0.2 Description: Application is vulnerable to Stored XSS attack. There is a XSS issue in version 2.0.2. and the vulnerable parameters are "Blog name" and...