cashwise.co.nz XSS vulnerability

Open Bug Bounty ID: OBB-481246 Description| Value ---|--- Affected Website:| cashwise.co.nz Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure base...

konsultimet.rks-gov.net XSS vulnerability

Open Bug Bounty ID: OBB-477876 Description| Value ---|--- Affected Website:| konsultimet.rks-gov.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

thebeijingtailor.com XSS vulnerability

Open Bug Bounty ID: OBB-469351 Description| Value ---|--- Affected Website:| thebeijingtailor.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

davearbogast.com XSS vulnerability

Open Bug Bounty ID: OBB-466985 Description| Value ---|--- Affected Website:| davearbogast.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

lonaspublicitarias.mexicored.com.mx XSS vulnerability

Open Bug Bounty ID: OBB-466675 Description| Value ---|--- Affected Website:| lonaspublicitarias.mexicored.com.mx Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XS...

shop.vigilantecoffee.com XSS vulnerability

Open Bug Bounty ID: OBB-462691 Description| Value ---|--- Affected Website:| shop.vigilantecoffee.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

librawspeed/TiffDecoderFuzzer-DcrDecoder: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6168972937396224 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-DcrDecoder Fuzz target binary: TiffDecoderFuzzer-DcrDecoder Job Type: libfuzzermsanlibrawspeed Platform Id:...

gatfl.gatech.edu XSS vulnerability

On the 26.12.2017 security researcher reported a XSS vulnerability affecting the gatfl.gatech.edu website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 26 December, 201...

fab-talents.fr XSS vulnerability

Open Bug Bounty ID: OBB-458258 Description| Value ---|--- Affected Website:| fab-talents.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

adoro-a-justin-drew-bieber.globered.com XSS vulnerability

Open Bug Bounty ID: OBB-458151 Description| Value ---|--- Affected Website:| adoro-a-justin-drew-bieber.globered.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

hr.com XSS vulnerability

Open Bug Bounty ID: OBB-457224 Description| Value ---|--- Affected Website:| hr.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Two Critical 0-Day Remote Exploits for vBulletin Forum Disclosed Publicly

Security researchers have discovered and disclosed details of two unpatched critical vulnerabilities in a popular internet forum software—vBulletin—one of which could allow a remote attacker to execute malicious code on the latest version of vBulletin application server. vBulletin is a widely use...

brandsworld.com.sg XSS vulnerability

Open Bug Bounty ID: OBB-454505 Description| Value ---|--- Affected Website:| brandsworld.com.sg Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

abasolo.mexicored.com.mx XSS vulnerability

Open Bug Bounty ID: OBB-454118 Description| Value ---|--- Affected Website:| abasolo.mexicored.com.mx Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventio...

trazoom.de XSS vulnerability

Vulnerable URL:...

Node.js third-party modules: [lactate] Static Web Server Directory Traversal via Crafted GET Request

Hi @vdeturckheim, A crafted GET request can be leveraged to traverse the directory structure of a host using the lactate web server package, and request arbitrary files outside of the specified web root. Module specification Name: lactate Version: 0.13.12 latest release build Verified conditions...

lyrics.az XSS vulnerability

Open Bug Bounty ID: OBB-451085 Description| Value ---|--- Affected Website:| lyrics.az Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ec.europa.eu XSS vulnerability

Open Bug Bounty ID: OBB-450827 Description| Value ---|--- Affected Website:| ec.europa.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-16854

In Open Ticket Request System OTRS through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacker who is logged in as a customer can use the ticket search form to disclose internal article information of their customer tickets...

themoviedb.org XSS vulnerability

Vulnerable URL: https://www.themoviedb.org/genre/27-horror?page=2by=x" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8340 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|---...