CVE-2017-7388

A Cross-Site Scripting XSS was discovered in 'wallacepos v1.4.1'. The vulnerability exists due to insufficient filtration of user-supplied data token passed to the 'wallacepos-master/myaccount/resetpassword.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the...

samuel-vernon.net XSS vulnerability

Vulnerable URL: http://www.samuel-vernon.net/kleinschemlak/kleinschemlak/index.php?actuallanguageid=1id=40mid=37"alert/OPENBUGBOUNTY/...

ildertondodgechryslerjeep.com XSS vulnerability

Vulnerable URL: http://ildertondodgechryslerjeep.com/all-inventory/index.htm?listingConfigId=AUTO-new,AUTO-used"'--!====0==true=true=SEARCH=false=false=false=true=BLANK=true=model:make,city:province,city:state=compliantKNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch...

kondice.cz XSS vulnerability

Vulnerable URL: http://kondice.cz/?s=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 706807 VIP website status:| No...

5cornersdodgechryslerjeep.net XSS vulnerability

Vulnerable URL: http://www.5cornersdodgechryslerjeep.net/all-inventory/index.htm?listingConfigId=AUTO-new,AUTO-used"'--!confirmOPENBUGBOUNTY...

jeffwylerchevroletofcolumbus.com XSS vulnerability

Vulnerable URL: http://jeffwylerchevroletofcolumbus.com/all-inventory/index.htm?listingConfigId=AUTO-new,AUTO-used"'--!confirmOPENBUGBOUNTY...

celebrity-statement.de XSS vulnerability

Vulnerable URL: http://www.celebrity-statement.de/search.php?search='"--!'...

CVE-2016-9368

An issue was discovered in Eaton xComfort Ethernet Communication Interface ECI Versions 1.07 and prior. By accessing a specific uniform resource locator URL on the webserver, a malicious user may be able to access files without authenticating...

syr.de XSS vulnerability

Vulnerable URL: http://www.syr.de/en/index.asp?art=pressearchiv=37=2'"--!confirmOPENBUGBOUNTY...

CVE-2016-8362

An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series...

steamcommunity.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-213043 Description| Value ---|--- Affected Website:| steamcommunity.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

dr-haffani-slim.chirurgiens-dentistes.fr XSS vulnerability

Vulnerable URL: http://www.dr-haffani-slim.chirurgiens-dentistes.fr/recherche.php?recherche=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

albi.brit-hotel.fr XSS vulnerability

Vulnerable URL: http://albi.brit-hotel.fr/mapframe.php?lat=;...

concarneau.brit-hotel.fr XSS vulnerability

Vulnerable URL: http://concarneau.brit-hotel.fr/mapframe.php?lat=;...

workshop.brithotel.fr XSS vulnerability

Vulnerable URL: http://workshop.brithotel.fr/mapframe.php?lat=;...

avkvalves.com.au XSS vulnerability

Vulnerable URL: http://www.avkvalves.com.au/en-au/searchresults?search=asfas"';-- Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6342338 VIP website status:| No Check avkvalves.com.au SSL connection:| Grade: F...

copyrightsandwrongs.nen.gov.uk XSS vulnerability

Open Bug Bounty ID: OBB-211098 Description| Value ---|--- Affected Website:| copyrightsandwrongs.nen.gov.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

temptations.nl XSS vulnerability

Open Bug Bounty ID: OBB-207520 Description| Value ---|--- Affected Website:| temptations.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hkuysta.org XSS vulnerability

Vulnerable URL: http://www.hkuysta.org/web/subpage.php?mid=13〈=cn...

Nextcloud: Drone Nextcloud

Greetings, On drone : https://drone.nextcloud.com We observe this : ---- F152818 I noticed that it's possible to alter the url to write what you want : ---- https://drone.nextcloud.com/rbcafe/settings/settings/badges F152817 In fact it could be anything : ----...