tixuma.de XSS vulnerability

Vulnerable URL: http://www.tixuma.de/index.php?mp=search==%22%2F%3E%27%3E%22%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E=0 Details: Description| Value ---|--- Patched:| Yes, at 29.07.2017 Latest check for patch:| 29.07.2017 19:35 GMT Vulnerability type:| XSS Vulnerability...

longislandcondos.com XSS vulnerability

Vulnerable URL: http://www.longislandcondos.com/rets-searchresults.asp?develop=%22%3E%3C/script%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3EThe%20Manors Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

richard.ritornell.at XSS vulnerability

Vulnerable URL: http://richard.ritornell.at/index.php?show=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

Microsoft Windows - win32k!NtGdiGetOutlineTextMetricsInternalW Kernel Stack Memory Disclosure Exploi

Exploit for windows platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1179 We have discovered that it is possible to disclose portions of uninitialized kernel stack memory to user-mode applications in Windows 7-10 through the...

alcottelementary.net XSS vulnerability

Vulnerable URL: http://www.alcottelementary.net/apps/account/profile.jsp?activationForwardURL=%22%3Etrolo%3Ci%3Etralala%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability...

Microsoft Skype 7.2 / 7.35 / 7.36 Buffer Overflow Exploit

Exploit for windows platform in category dos / poc Document Title: =============== Microsoft Skype v7.2, v7.35 & v7.36 - Stack Buffer Overflow Vulnerability Vulnerability Magazine:...

brause-racing.de XSS vulnerability

Open Bug Bounty ID: OBB-251992 Description| Value ---|--- Affected Website:| brause-racing.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

volleybalkrant.nl XSS vulnerability

Vulnerable URL: http://www.volleybalkrant.nl/zoeken Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 953255 VIP website status:| No Check volleybalkrant.nl SSL connection:| Grade: F...

gdal: Heap-buffer-overflow in decode_celldata

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5319035514257408 Project: gdal Fuzzer: libFuzzergdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x626000005d7e Crash State: decodecelldata...

Microsoft Windows - 'nt!NtQueryInformationWorkerFactory (WorkerFactoryBasicInformation)' Kernel Stack Memory Disclosure

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1214&desc=2 We have discovered that the nt!NtQueryInformationWorkerFactory system call called with the WorkerFactoryBasicInformation 7 information class discloses portions of uninitialized kernel stack memory to user-mode clients...

Microsoft Windows - 'nt!NtQueryInformationJobObject (information class 12)' Kernel Stack Memory Disclosure

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1193 We have discovered that the nt!NtQueryInformationJobObject system call corresponding to the documented QueryInformationJobObject API function called with the 12 information class discloses portions of uninitialized kernel...

p.uthing.cn XSS vulnerability

Vulnerable URL: http://p.uthing.cn/search?q=%27;alert0//%5C%27;alert1//%22;alert2//%5C%22;alert+3//--%3E%3C/SCRIPT%3E%22%3E%27+%3E%3CSCRIPT%3Ealert/XSSPOSED/%3C/SCRIPT%3E=&%7B%7D%22;%7Dalert6+;function+xss%7B// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017...

Microsoft Windows - IOCTL 0x390400, operation code 0x00020000 Kernel KsecDD Pool Memory Disclosure E

Exploit for windows platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1147 We have discovered that the IOCTL sent to the \Device\KsecDD device by the BCryptOpenAlgorithmProvider documented API returns some uninitialized pool memory in the output...

Microsoft Windows - IOCTL_VOLUME_GET_VOLUME_DISK_EXTENTS volmgr Pool Memory Disclosure Exploit

Exploit for windows platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1154 We have discovered that the handler of the IOCTLVOLUMEGETVOLUMEDISKEXTENTS IOCTL in volmgr.sys discloses portions of uninitialized pool memory to user-mode clients, due to...

buh.ru Open Redirect vulnerability

Open Bug Bounty ID: OBB-250478 Description| Value ---|--- Affected Website:| buh.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

bahceci.com XSS vulnerability

Open Bug Bounty ID: OBB-248996 Description| Value ---|--- Affected Website:| bahceci.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

newgenrv.com XSS vulnerability

Vulnerable URL: http://www.newgenrv.com/enus/typebrowse.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6811197 VIP website status:| No Check newgenrv.com SSL connection:| Grade...

ctan.org XSS vulnerability

Vulnerable URL: https://www.ctan.org/help/json/searching/"'--! Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 15:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 33621 VIP website status:| Yes Check ctan.or...

foodmart.com.bd XSS vulnerability

Open Bug Bounty ID: OBB-248203 Description| Value ---|--- Affected Website:| foodmart.com.bd Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

webs.wichita.edu XSS vulnerability

Vulnerable URL: http://webs.wichita.edu/?u=rscrenewal"--!"=/Funding Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| Yes Check...