7404 matches found
Apple iTunes iPodService Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple iTunes. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the...
lingxi360.com XSS vulnerability
Open Bug Bounty ID: OBB-265067 Description| Value ---|--- Affected Website:| lingxi360.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
z6.com XSS vulnerability
Vulnerable URL: https://z6.com/h-product-search.html?keywords=aaaaa%22+onfocus%3Dconfirm/OPENBUGBOUNTY/+autofocus%3Dx+bad%3D%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11272...
avbus888.com XSS vulnerability
Open Bug Bounty ID: OBB-264858 Description| Value ---|--- Affected Website:| avbus888.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
thetimes24-7.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-264440 Description| Value ---|--- Affected Website:| thetimes24-7.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
Microsoft Windows COM Session Moniker Privilege Escalation Exploit
Microsoft Windows has a bad fix for the COM session moniker that can allow for elevation of privilege. Windows: Bad Fix for COM Session Moniker EoP CVE-2017-0298 Windows: Bad Fix for COM Session Moniker EoP So.... The previous fix for CVE-2017-0100 sounds wrong on the face of it. Rather than fixi...
DEBIAN-CVE-2017-11173
Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted example.com domain name and not the malicious example.net domain name, then example.com.example.net as well as...
UBUNTU-CVE-2017-11173
Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted example.com domain name and not the malicious example.net domain name, then example.com.example.net as well as...
boat24.com XSS vulnerability
Vulnerable URL: https://www.boat24.com/de/gebrauchtboote/?search=Suchen=aaaaa%22+onfocus%3Dprompt%28%2FOPENBUGBOUNTY%2F%29+autofocus%3Dx+bad%3D%22%3Eaa%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%3Cmarquee+onstart%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3Edemonium%3C%2Ftag%3E=EUR Details: Description| Value...
viva100.com XSS vulnerability
Vulnerable URL: http://www.viva100.com/main/searchdetail.php?sword=aaaaa%22+onfocus%3Dprompt%2FOPENBUGBOUNTY%2F+autofocus%3Dx+bad%3D%22%3Eaa%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%3Cmarquee+onstart%3Dprompt%2FOPENBUGBOUNTY%2F%3Edemonium%3C%2Ftag%3E Details: Description| Value ---|--- Patched:| No...
korenan2.com XSS vulnerability
Open Bug Bounty ID: OBB-262710 Description| Value ---|--- Affected Website:| korenan2.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
3454.com XSS vulnerability
Vulnerable URL: http://www.3454.com/s.php?k=%22%2F%3E%27%3E%22%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17906 V...
Microsoft .NET Privilege Escalation Vulnerability
Exploit for windows platform in category local exploits Hi @ll, all versions of .NET Framework support to load a COM object as code profiler, enabled via two or three environment variables. From | A profiler DLL is an unmanaged DLL that runs as part of the | common language runtime execution...
yourtheater411.com XSS vulnerability
Vulnerable URL: https://www.yourtheater411.com/auditions.php/twelfth-night.php?id=1"...
drsx168.com XSS vulnerability
Vulnerable URL: http://www.drsx168.com/faqshow.php?id=%22%3E%3Cimg%20src=x%20onerror=javascript:prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 18.08.2017 Latest check for patch:| 18.08.2017 05:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...
Microsoft .NET Privilege Escalation
Hi @ll, all versions of .NET Framework support to load a COM object as code profiler, enabled via two or three environment variables. From | A profiler DLL is an unmanaged DLL that runs as part of the | common language runtime execution engine. As a result, the code | in the profiler DLL is not...
yeah1.com XSS vulnerability
Open Bug Bounty ID: OBB-260818 Description| Value ---|--- Affected Website:| yeah1.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
harikadizi5.com XSS vulnerability
Vulnerable URL: http://www.harikadizi5.com/dizi-bul?d=aaaaa%27%22+ONFOCUS%3Dprompt%22OPENBUGBOUNTY%22+autofocus%3Dx+bad%3D%22%3Ede%27m%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%3Cmarquee+onstart%3Dprompt%22OPENBUGBOUNTY%22%3Edem%3C%2Ftag%3E= Details: Description| Value ---|--- Patched:| Yes, at...