Lucene search
K

1035 matches found

Openbugbounty
Openbugbounty
added 2017/12/21 9:0 a.m.10 views

barriekempettes.ca XSS vulnerability

Open Bug Bounty ID: OBB-456497 Description| Value ---|--- Affected Website:| barriekempettes.ca Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

6.4AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/12/02 4:38 p.m.10 views

secure.azulstar.com XSS vulnerability

Open Bug Bounty ID: OBB-446802 Description| Value ---|--- Affected Website:| secure.azulstar.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

6.4AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/11/23 5:19 a.m.12 views

epost.ca XSS vulnerability

Open Bug Bounty ID: OBB-429236 Description| Value ---|--- Affected Website:| epost.ca Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/11/15 12:29 p.m.16 views

stuart.training XSS vulnerability

Open Bug Bounty ID: OBB-417556 Description| Value ---|--- Affected Website:| stuart.training Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/11/01 5:18 p.m.9 views

ohpadmin.com XSS vulnerability

Open Bug Bounty ID: OBB-385178 Description| Value ---|--- Affected Website:| ohpadmin.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.2AI score
Exploits0
Hacker One
Hacker One
added 2017/10/19 2:1 p.m.30 views

Infogram: Weak Password Policy on Signup

Hi Team, i would like to let you know about password management issue. PoC: 1. Navigate to signup page. 2. Fill you details and give password as simple as 123123. 3. You can see you will be registered and there is no strong enforcement. Fix: Use complex password management. Regards, Mr.R3boot...

7AI score
Exploits0
Hacker One
Hacker One
added 2017/10/15 2:0 a.m.45 views

New Relic: Captcha Bypass on SignUp Form

The g-recaptcha-response parameter was not validated on the server side when submitting a form to the /signups endpoint. Any or no value could be provided for this parameter...

2AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/09/29 11:58 p.m.11 views

forvo.com XSS vulnerability

Vulnerable URL: https://forvo.com/signup/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7561 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|---...

6.3AI score
Exploits0
CNVD
CNVD
added 2017/09/26 12:0 a.m.3 views

Public Transportation eTraffic App Has Logic Design Flaws

Bus eLutong is a free smartphone-based real-time bus information query software officially released by Beijing Public Transportation Group. There is a logical design vulnerability in Bus eLutong App, which allows an attacker to arbitrarily register a user and reset any user's password by grabbing...

6.8AI score
Exploits0
Hacker One
Hacker One
added 2017/09/18 11:28 a.m.31 views

Hiro: Cross site request forgery

An e-mail signup form does not check CSRF tokens. This would allow the creation of click-able links which perform an e-mail signup. Because the e-mail signup form does not pass any sensitive information, nor perform any state changes on behalf of a user, this is not a vector for attack...

6.9AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/09/09 8:54 p.m.12 views

sezion.com XSS vulnerability

Vulnerable URL: https://sezion.com/signup?type=FREE%22%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 868920 VIP website status:| N...

6.3AI score
Exploits0
Hacker One
Hacker One
added 2017/09/06 8:9 p.m.29 views

GSA Bounty: [api.data.gov] Leak Valid API With out Verification -

Description Remote attackers are able to retrieve a valid working api key with random Generation Process without a secure parsing or secure channel , human verification ..etc . the current proccess for requesting any api key is with signup form , and message with api delivered privately to user ,...

7AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/07/15 2:46 p.m.14 views

logz.io XSS vulnerability

Open Bug Bounty ID: OBB-264620 Description| Value ---|--- Affected Website:| logz.io Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
Exploits0
Hacker One
Hacker One
added 2017/07/07 7:33 a.m.93 views

Coinbase: Captcha Bypass in Coinbase SignUp Form

Vulnerability description: The g-recaptcha-response is not validated on the server-side when submitting a Signup form to the endpoint. Any or no value can be provided for this header Step to reproduce: 1. https://www.coinbase.com/signup 2. Fill the input field and Validate the captcha. 3. Trun on...

6.8AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/05/31 8:45 a.m.14 views

salesgossip.co.uk XSS vulnerability

Vulnerable URL: https://www.salesgossip.co.uk/signup?bl=/shop/next?sf=13031source=Googlemedium=CPCcampaign=Next=%20%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E%22=sgwebcpcgoogle=female=+\" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerabilit...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/05/24 6:6 a.m.7 views

shopinas.com XSS vulnerability

Vulnerable URL: http://www.shopinas.com/signup/shopper Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 939934 VIP website status:| No Check shopinas.com SSL connection:| Grade: F...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/05/22 8:56 a.m.10 views

hollywoodfotofix.com XSS vulnerability

Vulnerable URL: https://www.hollywoodfotofix.com/dealer/signup.php?action=add="--!"=0=====add1=add2=city=stateCode=otherState=code=countryCode=phone=fax=mobile=clientTypeID=9= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerabili...

6.3AI score
Exploits0
Hacker One
Hacker One
added 2017/05/21 9:46 a.m.36 views

Coinbase: Csrf bug on signup session

NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, researchers are more likely to earn a larger bounty by explaining how a vulnerability can be exploited to cause harm to Coinbase or its users. Summary: CSRF bug on coinbase...

6.8AI score
Exploits0
Hacker One
Hacker One
added 2017/05/18 3:18 a.m.25 views

Starbucks: Host header injection/redirection via newsletter signup

Good evening, There's a host header injection vulnerability via all newsletter signups in the referrer attribute. This works with all pages that have "Join our email list" signup boxes. Since the referrer attribute can be changed to an outside domain the email being received redirects all links...

0.3AI score
Exploits0
Veracode
Veracode
added 2017/05/09 5:31 a.m.9 views

Unauthorised New User Signup

fatfreecrm is susceptible to unauthorised new user signup. The vulnerability exists because userscontroller does not prevent creation of a new user signup using crafted POST request...

6.2AI score
Exploits0
Rows per page
Query Builder