PT-2017-14104

Name of the Vulnerable Software and Affected Versions Redmine versions prior to 3.2.6 Redmine versions 3.3.x prior to 3.3.3 Description The issue allows remote attackers to obtain sensitive information, specifically password reset tokens, by reading a Referer log. This is because the account/lost...

zip-codes.com XSS vulnerability

Vulnerable URL: https://www.zip-codes.com/accountlostpassword.asp?action=Continue="'[email protected]==bnovmanh Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 64502 VIP website status:...