Microsoft Windows 10 - WLDPMSHTML CLSID UMCI Bypass

Microsoft Windows 10 - WLDPMSHTML CLSID UMCI Bypass Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1328 Windows: WLDP/MSHTML CLSID UMCI Bypass Platform: Windows 10 S thought should be anything with UMCI Class: Security Feature Bypass Summary: The enlightened lockdown policy che...

hosting24.com XSS vulnerability

Open Bug Bounty ID: OBB-340268 Description| Value ---|--- Affected Website:| hosting24.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

v9181012.com XSS vulnerability

Vulnerable URL: http://v9181012.com/login.php?o=http://v9181012.com/search.php?ss="'--!...

kj688688.com XSS vulnerability

Vulnerable URL: http://kj688688.com/login.php?o=http://kj688688.com/search.php?ss="'--!...

coast1011.com XSS vulnerability

Vulnerable URL: http://www.coast1011.com/index.php?page=promo=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5746174 VIP website status:| No Coordinated Disclosure Timeline:...

taofen8.com XSS vulnerability

Vulnerable URL: http://www.taofen8.com/?c=%3C/script%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 53777 VIP website status:| No...

newschannel5.com XSS vulnerability

Vulnerable URL: http://www.newschannel5.com/?token=%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 58722 VIP website status:| No Coordinated Disclosure Timeline:...

sport360.com XSS vulnerability

Open Bug Bounty ID: OBB-337335 Description| Value ---|--- Affected Website:| sport360.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Hancom Hangul HCell HncChart CFormulaTokenSizeModifier Code Execution Vulnerability(CVE-2016-4295)

Description This vulnerability was discovered within the Hangul Hcell application which is part of the Hangul Office Suite. Hangul Office is published by Hancom, Inc. and is considered one of the more popular Office suites used within South Korea. When opening a Hangul Hcell Document .cell and...

Hancom Hangul HCell Workbook Table and Pivot Style Code Execution Vulnerability(CVE-2016-4293)

Description This vulnerability was discovered within the Hangul Hcell application which is part of the Hangul Office Suite. Hangul Office is published by Hancom, Inc. and is considered one of the more popular Office suites used within South Korea. When opening a Hangul Hcell Document .cell and...

mybe4.com XSS vulnerability

Open Bug Bounty ID: OBB-336533 Description| Value ---|--- Affected Website:| mybe4.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

toonipang1.com XSS vulnerability

Open Bug Bounty ID: OBB-336520 Description| Value ---|--- Affected Website:| toonipang1.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

yaboja14.com XSS vulnerability

Open Bug Bounty ID: OBB-336511 Description| Value ---|--- Affected Website:| yaboja14.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

scout24.com XSS vulnerability

Open Bug Bounty ID: OBB-336445 Description| Value ---|--- Affected Website:| scout24.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

do512.com XSS vulnerability

Vulnerable URL: http://do512.com/?=%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 51709 VIP website status:| No Coordinated Disclosure...

h-game123.com XSS vulnerability

Vulnerable URL: https://h-game123.com/index.php?search=1%22%27--!%3E%3CScript%20/K/%3Econfirm/OPENBUGBOUNTY/%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 67353...

usi32.com XSS vulnerability

Vulnerable URL: http://usi32.com/?s=%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 31080 VIP website status:| Yes Coordinated Disclosu...

Rancher Server - Docker Daemon Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Rancher Server - Docker Exploit', 'Description' = %q Utilizing Rancher Server, an attacker can create a docker container with the '/' path mounte...

yytt2012.com XSS vulnerability

Open Bug Bounty ID: OBB-327687 Description| Value ---|--- Affected Website:| yytt2012.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

granvia2.com XSS vulnerability

Open Bug Bounty ID: OBB-326181 Description| Value ---|--- Affected Website:| granvia2.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...