fushi.x0.com XSS vulnerability

Vulnerable URL: http://fushi.x0.com/cap/Navi/menuright.php?tagkeyword= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

trbet22.com XSS vulnerability

Vulnerable URL: https://www.trbet22.com/ps/game"--!"/GameContainer.action/KNOXSS Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline:...

Microsoft Windows - Uncredentialed SMB RCE (MS17-010) Exploit

This Metasploit module uses information disclosure to determine if MS17-010 has been patched or not. Specifically, it connects to the IPC$ tree and attempts a transaction on FID 0. If the status returned is "STATUSINSUFFSERVERRESOURCES", the machine does not have the MS17-010 patch. This Metasplo...

CVE-2017-0199: Microsoft Office RTF vulnerability using the PoC-vulnerability warning-the black bar safety net

0x01 description From FireFye detect and publish CVE-2017-0199 since, I have been researching this vulnerability in Microsoft officially released the patch, I decided to release this PoC. I use way possible with other researchers using different methods, the use of the method may be little bit...

erptraining9.com XSS vulnerability

Vulnerable URL: http://www.erptraining9.com/payment.php?id=basictraining"';-- Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 19:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1960976 VIP website status:| ...

CVE-2017-0199: analysis Microsoft Office RTF vulnerability-vulnerability warning-the black bar safety net

FireEye recently detected using CVE-2017-0199 security vulnerabilities malicious Microsoft Office RTF document, be aware of CVE-2017-0199, but had not been disclosed vulnerability. When the user opens that contains the exploit Code of the document, the malicious code will download and execute the...

innovatorsrace50.com XSS vulnerability

Open Bug Bounty ID: OBB-223467 Description| Value ---|--- Affected Website:| innovatorsrace50.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

camp24.com XSS vulnerability

Open Bug Bounty ID: OBB-222627 Description| Value ---|--- Affected Website:| camp24.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

privatbank1891.com XSS vulnerability

Open Bug Bounty ID: OBB-222463 Description| Value ---|--- Affected Website:| privatbank1891.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

avenue5.com XSS vulnerability

Vulnerable URL: http://www.avenue5.com/Community-Search-List-View.aspx?q=California=%22--%3E%20%3C/script%3E%3Csvg/onload=%27;alert/OPENBUGBOUNTY/;%27%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2323566 VI...

Adups Local Information Disclosure Vulnerability

Adups Fota is a professional wireless upgrade solution for IoT devices smart car, wearable, home, VR, etc. from Shanghai Guangsheng Information Technology Co. Adups suffers from a local information disclosure vulnerability. The vulnerability is caused by the AndroidManifest.xml file of the...

ersatzteile-24.com XSS vulnerability

Vulnerable URL: https://www.ersatzteile-24.com/shop.php?=Y=%22%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 179321 VIP websi...

beacon724.com XSS vulnerability

Open Bug Bounty ID: OBB-221020 Description| Value ---|--- Affected Website:| beacon724.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mini.club1779.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-221002 Description| Value ---|--- Affected Website:| mini.club1779.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

asian18.com XSS vulnerability

Vulnerable URL: http://www.asian18.com/?nats=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27;%3EMzAwMDM3MC4xLjczLjIxMy4xLjAuMC4wLjA Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

qone8.com XSS vulnerability

Vulnerable URL: http://qone8.com/web?q=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 32972 VIP website status:| Yes Check qone8.co...

ch7.com XSS vulnerability

Vulnerable URL: http://www.ch7.com/result?keyword=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 320...

Microsoft Office - OLE Multiple DLL Side Loading Vulnerabilities (MS15-132/MS16-014/MS16-025/MS16-04

Exploit for windows platform in category local exploits require 'zip' require 'base64' require 'msf/core' require 'rex/ole' class MetasploitModule 'Office OLE Multiple DLL Side Loading Vulnerabilities', 'Description' = %q Multiple DLL side loading vulnerabilities were found in various COM...

go.fold3.com XSS vulnerability

Open Bug Bounty ID: OBB-219752 Description| Value ---|--- Affected Website:| go.fold3.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mtgtop8.com XSS vulnerability

Vulnerable URL: http://mtgtop8.com/search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 30650 VIP website status:| Yes Check mtgtop8.com SSL connection:| Grade: F Coordinated...