beacon724.com XSS vulnerability

Open Bug Bounty ID: OBB-221020 Description| Value ---|--- Affected Website:| beacon724.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mini.club1779.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-221002 Description| Value ---|--- Affected Website:| mini.club1779.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

asian18.com XSS vulnerability

Vulnerable URL: http://www.asian18.com/?nats=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27;%3EMzAwMDM3MC4xLjczLjIxMy4xLjAuMC4wLjA Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

qone8.com XSS vulnerability

Vulnerable URL: http://qone8.com/web?q=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 32972 VIP website status:| Yes Check qone8.co...

ch7.com XSS vulnerability

Vulnerable URL: http://www.ch7.com/result?keyword=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 320...

Microsoft Office - OLE Multiple DLL Side Loading Vulnerabilities (MS15-132/MS16-014/MS16-025/MS16-04

Exploit for windows platform in category local exploits require 'zip' require 'base64' require 'msf/core' require 'rex/ole' class MetasploitModule 'Office OLE Multiple DLL Side Loading Vulnerabilities', 'Description' = %q Multiple DLL side loading vulnerabilities were found in various COM...

go.fold3.com XSS vulnerability

Open Bug Bounty ID: OBB-219752 Description| Value ---|--- Affected Website:| go.fold3.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mtgtop8.com XSS vulnerability

Vulnerable URL: http://mtgtop8.com/search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 30650 VIP website status:| Yes Check mtgtop8.com SSL connection:| Grade: F Coordinated...

Joomla com_carocci plugin 'isbn' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'isbn' parameter of the Joomla comcarocci plugin. An attacker can exploit the vulnerability to access or modify database data...

Joomla com_easyblog parameter 'id' plugin SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla comeasyblog parameter 'id' plugin. An attacker can exploit the vulnerability to access or modify database data...

Microsoft Windows - COM Session Moniker Privilege Escalation (MS17-012)

Microsoft Windows - COM Session Moniker Privilege Escalation MS17-012 / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1021 Windows: COM Session Moniker EoP Platform: Tested on Windows 10 14393, Server 2012 R2 Class: Elevation of Privilege Summary: When activating an object usi...

Joomla com_virtuemart plugin 'id' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the mainproduct parameter of the Joomla comproduct component. An attacker can exploit the vulnerability to access or modify database data...

MS17-012：Windows COM Session Moniker EoP（CVE-2017-0100）

Description: The COM session moniker allows a user to specify the interactive session that’s to be used when a DCOM object is registered with an AppID with RunAs of “Interactive User”. As switching sessions is not something a normal user can do you’d assume that this would be only accessible to...

Microsoft Windows - COM Session Moniker Privilege Escalation (MS17-012)

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1021 Windows: COM Session Moniker EoP Platform: Tested on Windows 10 14393, Server 2012 R2 Class: Elevation of Privilege Summary: When activating an object using the session moniker the DCOM activator doesn’t check if the current...

fax1.com XSS vulnerability

Vulnerable URL: https://www.fax1.com/isapi/counter.dll?BackgroundColor=%22%3E%3Csvg/onload=alert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4226428 VIP...

Windows COM Session Elevation of Privilege Vulnerability

An elevation of privilege exists in Windows when a DCOM object in Helppane.exe, configured to run as the interactive user, fails to properly authenticate the client. An attacker who successfully exploited the vulnerability could run arbitrary code in another user's session. To exploit the...

Microsoft Windows COM Elevation of Privilege (MS17-012: CVE-2017-0100)

An elevation of privilege vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way Windows COM session moniker enforces RunAs permissions when registering DCOM objects. A remote attacker can exploit this vulnerability to execute arbitrary code...

paste829.com XSS vulnerability

Vulnerable URL: http://paste829.com/p/82c5a84 Details: Description| Value ---|--- Patched:| Yes, at 13.04.2017 Latest check for patch:| 13.04.2017 00:39 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 784706 VIP website status:| No Check paste829.com SSL...

notaires35.com XSS vulnerability

Open Bug Bounty ID: OBB-218326 Description| Value ---|--- Affected Website:| notaires35.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

yzf888.com XSS vulnerability

Vulnerable URL: http://www.yzf888.com/privacy-policy-yao.html?p=12344321%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Autofocus/%0D/Onfocus=confirmOPENBUGBOUNTY// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...