SubOver - A Powerful Subdomain Takeover Tool

Subover is a Hostile Subdomain Takeover tool designed in Python. From start, it has been aimed with speed and efficiency in mind. Till date, SubOver detects 36 services which is much more than any other tool out there. The tool is multithreaded and hence delivers good speed. It can easily detect...

OracleVM 3.2 : xen (OVMSA-2017-0159)

The remote OracleVM system is missing necessary patches to address critical security updates : - The code of OVM3.2.9 is quite old, there is no getpage/putpage pair to protect the ownership and references of page table page which is mapped in emulatemapdest. This patch fix it by adding getpage in...

sincroniai.com XSS vulnerability

Vulnerable URL: http://www.sincroniai.com/es/%22+%3E%3C%252Fsvg%3E%3C%252F|%3E%3Csvg%252Fonload=prompt2%3E/7/0-0-g-p-0/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

drumspeech.com XSS vulnerability

Vulnerable URL: http://www.drumspeech.com/articles.php?id=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 169574 VIP website status:| No Coordinated Disclosure Timeline:...

thefirm.moneycontrol.com XSS vulnerability

Vulnerable URL: http://thefirm.moneycontrol.com/articals.php?category=13'"9=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

hozvo.ru XSS vulnerability

Vulnerable URL: http://hozvo.ru/?search=%22%3E%3Csvg%20onload=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 158450 VIP website status:| No Coordinated...

5vin.biz XSS vulnerability

Vulnerable URL: http://5vin.biz/?a=support Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1704017 VIP website status:| No Check 5vin.biz SSL connection:| Grade: F Coordinated...

conntek.com XSS vulnerability

Vulnerable URL: http://www.conntek.com/products.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6148626 VIP website status:| No Coordinated Disclosure Timeline: Description| Val...

newsletter.ua.pt Open Redirect vulnerability

Vulnerable URL: https://newsletter.ua.pt/clickthrough.aspx?i=1380=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

solerpalau.at XSS vulnerability

Vulnerable URL: http://www.solerpalau.at/suchergebnis.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3841681 VIP website status:| No Coordinated Disclosure Timeline: Descriptio...

ucanr.edu XSS vulnerability

Vulnerable URL: https://ucanr.edu/portal/login/UniversalLogin.cfm?msg=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 44642 VIP website status...

micor.agriculture.gov.au XSS vulnerability

Vulnerable URL: https://micor.agriculture.gov.au/Pages/default.aspx?FollowSite=0=%27-confirm%27OPENBUGBOUNTY%27-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

headbanger.ru Open Redirect vulnerability

Vulnerable URL: http://headbanger.ru/go?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 273854 VIP website status:| No Coordinated...

olakala.cz XSS vulnerability

Vulnerable URL: http://www.olakala.cz/search.asp?searchText=vlasta%22%3E%3Csvg/onload=alert%28document.domain%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7591813 VIP websi...

casqueandgauntlet.org XSS vulnerability

Vulnerable URL: https://casqueandgauntlet.org/246-galleries/homeslider/index.html?bg=xss" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17891121 VIP website status:| No Coordinate...

rimavel.com.br XSS vulnerability

Vulnerable URL: http://rimavel.com.br/search.php?q=%27%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

appprova.com.br XSS vulnerability

Vulnerable URL: http://appprova.com.br/search/%22%3E%3Csvg%20onload=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 133303 VIP website status:| No...

rbfindustries.co.uk XSS vulnerability

Vulnerable URL: http://www.rbfindustries.co.uk/healthcare/products.php?cat=category=Burnett Vacuum Supports"';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16638095 VIP website...

gjproperties.com XSS vulnerability

Vulnerable URL: http://www.gjproperties.com/%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15418813 VIP website status:| No...

arhivach.org XSS vulnerability

Vulnerable URL: https://arhivach.org/add/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16022 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|---...