CVE-2018-12901

A vulnerability in the conferencing component of Mitel ST 14.2, versions GA29 19.49.9400.0 and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack due to insufficient validation for the signin.php page. A successful exploit could allow an attack...

CVE-2018-12901

A vulnerability in the conferencing component of Mitel ST 14.2, versions GA29 19.49.9400.0 and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack due to insufficient validation for the signin.php page. A successful exploit could allow an attack...

Mitel MiVoice Connect Cross-Site Scripting Vulnerability (CNVD-2018-08581)

Mitel MiVoice Connect R1707-PREM and Mitel ST are both products of Mitel Canada.Mitel MiVoice Connect R1707-PREM is a Unified Communications Management Appliance.ST is a videoconferencing product.conferencing is one of the notification components. conferencing is one of the conference notificatio...

CVE-2018-9103

A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 21.84.5535.0 and earlier, and Mitel ST 14.2, versions GA27 19.49.5200.0 and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack due to insufficient...

CVE-2018-9103

A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 21.84.5535.0 and earlier, and Mitel ST 14.2, versions GA27 19.49.5200.0 and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack due to insufficient...

shopbop.com XSS vulnerability

Open Bug Bounty ID: OBB-575459 Description| Value ---|--- Affected Website:| shopbop.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure...

davidoff.menshealth.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-533357 Description| Value ---|--- Affected Website:| davidoff.menshealth.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

smashbox.com XSS vulnerability

Vulnerable URL: https://www.smashbox.com/account/signin.tmpl?SUBMIT="%3E%3Csvg onload = promptOPENBUGBOUNTY%0A \ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 92904 VIP website status:| No Check smashbox.com SS...

CVE-2016-4740

Apple iOS before 10, when Handoff for Messages is used, does not ensure that a Messages signin has occurred before displaying messages, which might allow attackers to obtain sensitive information via unspecified vectors...

varecha.com XSS vulnerability

Vulnerable URL: http://www.varecha.com/fb/signin.php?w=Basica75iy%22%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3Etar6b Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

rahnama.com XSS vulnerability

Vulnerable URL: http://www.rahnama.com/user/signin/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6646 VIP website status:| Yes Check rahnama.com SSL connection:| Grade: B+...

signin.verizon.com XSS vulnerability

Vulnerable URL: https://signin.verizon.com/sso/authsso/loginProcess.jsp?target=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| Yes, at 26.09.2017 Latest check for patch:| 26.09.2017 05:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

ohmyzip.com XSS vulnerability

Vulnerable URL: https://www.ohmyzip.com/account/signin?ret=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12052 VIP website status:| Yes Check ohmyzip.com SSL connection:| Grade:...

March 8, 2016, update for Office 2016 (KB3114705)

None None...

xoom.com XSS vulnerability

Vulnerable URL: https://www.xoom.com/signIn?r=I0ez7 Details: Description| Value ---|--- Patched:| Yes, at 18.08.2016 Latest check for patch:| 18.08.2016 02:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9350 Google Pagerank| 5 VIP website status:| Yes Check...

crazybelly.com XSS vulnerability

Open Bug Bounty ID: OBB-132205 Description| Value ---|--- Affected Website:| crazybelly.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

letsventure.com XSS vulnerability

Vulnerable URL: https://letsventure.com/signin?error=%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E=lol Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 20483 Google Pagerank| 0 VIP...

clickemprego.com XSS vulnerability

Vulnerable URL: http://www.clickemprego.com/signin.php?errmsg=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 19:50 GMT Vulnerability type:| XSS Vulnerability status:| Public...

HybridAuth 2.2.2 - Remote Code Execution

No description provided by source. | | / | \ | |/ |/ | / | | | | | | | | | | | | | / \ | | | || || | |\ | || | | / | | |/|| ||// \| HybridAuth = 2.2.2 Remote Code Execution Website : http://hybridauth.sourceforge.net/ Exploit Author : @u0x Pichaya Morimoto Release dates : August 5, 2014...

HybridAuth 2.1.2 Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 | | / | \ | |/ |/ | / | | | | | | | | | | | | | / \ | | | || || | |\ | || | | / | | |/|| ||// \| HybridAuth = 2.1.2 Remote Code Execution Website : http://hybridauth.sourceforge.net/ Exploit Author : @u0x Pichaya Morimoto Release dates :...