ret.ru XSS vulnerability

Vulnerable URL: http://www.ret.ru/?search=%22%3E%3Csvg%20onload=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 147803 VIP website status:| No Coordinate...

compare.ostrovok.ru XSS vulnerability

Open Bug Bounty ID: OBB-325706 Description| Value ---|--- Affected Website:| compare.ostrovok.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

atw.nl Open Redirect vulnerability

Vulnerable URL: https://www.atw.nl/redirect.php?url=data%3Atext%2Fhtml%3Bbase64%2CPHNjcmlwdD5hbGVydCgvT1BFTkJVR0JPVU5UWS8pPC9zY3JpcHQ%2B Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclose...

position.cz XSS vulnerability

Vulnerable URL: https://www.position.cz/en/img.php?URL=%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3165554 VIP website...

americanairlines.com.ru XSS vulnerability

Open Bug Bounty ID: OBB-322812 Description| Value ---|--- Affected Website:| americanairlines.com.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pecetowicz.pl Open Redirect vulnerability

Open Bug Bounty ID: OBB-322611 Description| Value ---|--- Affected Website:| pecetowicz.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

info.uni-karlsruhe.de XSS vulnerability

Vulnerable URL: http://www.info.uni-karlsruhe.de/publications.php/id=159'%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

hifi.nl XSS vulnerability

Vulnerable URL: https://www.hifi.nl/search?searchstr=999\74\41\47\57\52\42\57\52\134\47\57\52\134\42\57\52\55\55\76\74\57Script\76\74Img\40Src\751\40\52\57\73\40Onerror\75confirm\50/%27openbugbounty%27/\51\57\57\76 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.11.20...

mugaranch.com XSS vulnerability

Open Bug Bounty ID: OBB-322356 Description| Value ---|--- Affected Website:| mugaranch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

onlineregister.com XSS vulnerability

Open Bug Bounty ID: OBB-322087 Description| Value ---|--- Affected Website:| onlineregister.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

su-web2.nottingham.ac.uk XSS vulnerability

Vulnerable URL: http://su-web2.nottingham.ac.uk/ramsoc/pages/history////committeemember.php?name=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websi...

e2openplugin OpenWebif 1.2.4 Code Execution

Hello all, e2openplugin-OpenWebif is an open source web interface plugin for IP TVs and media centers. It is found in several IP TV software images and hardware products including the commercial Dreambox devices. A remote code injection vulnerability was found in the "key" HTTP GET parameter of t...

4sound.dk XSS vulnerability

Vulnerable URL: https://www.4sound.dk/search-results?search==t-rex%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 109989 VIP website status:| ...

www3.shanghaidaily.com XSS vulnerability

Vulnerable URL: http://www3.shanghaidaily.com/clk/?id=464=74=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

blog.roblox.com XSS vulnerability

Open Bug Bounty ID: OBB-318419 Description| Value ---|--- Affected Website:| blog.roblox.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Zyxel P-2812HNU-F1 DSL Router Command Injection

Zyxel P-2812HNU-F1 DSL router - command injection ================================================= The Zyxel P-2812 is common in the Netherlands KPN/Telfort and Norway Telenor. The Dutch firmware is susceptible to authenticated command injection through qosqueueadd.cgi and the WebQueueInterface...

victoriacarparts.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-317279 Description| Value ---|--- Affected Website:| victoriacarparts.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress Content Audit 1.9.1 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities

WordPress Content Audit plugin version 1.9.1 suffers from cross site request forgery and cross site scripting vulnerabilities. Details ================ Software: Content Audit Version: 1.9.1 Homepage: https://wordpress.org/plugins/content-audit/ Advisory report:...

Aspen: Server Path Disclosure

Hi Sir, I m Mahesh, Individual websecurity Researcher. i found server path disclosure in flask.io http://flask.aspen.io/en/latest/ http://flask.aspen.io/en/latest/index.html i found another path disclosure in django.io http://django.aspen.io/en/latest/ http://django.aspen.io/en/latest/index.html...

ifs.harriscountytx.gov XSS vulnerability

Vulnerable URL: https://ifs.harriscountytx.gov/pages/casestatus.aspx?FollowSite=0=%27-confirm%27OPENBUGBOUNTY%27-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...