tfl365.com XSS vulnerability

Vulnerable URL: https://tfl365.com/shopping-cart/?paymentsuccpage=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3Elandingpage=/t3/start-herename=Trifecta%25203submitted=Y=https://tfl365.com/shopping-cart=buynowlastupsell=YESgateway=stripe=Y=Y=N Details: Description| Value ---|--- Patched:| Yes, at...

Win CE Schannel cert wildcard matches too much

curl's TLS server certificate checks are flawed on Windows CE. This vulnerability occurs in the verify certificate function when comparing a wildcard certificate name as returned by the Windows API function CertGetNameString to the hostname used to make the connection to the server. The...

id.fc2.com XSS vulnerability

Vulnerable URL: http://id.fc2.com/signup.php?switchlanguage=1"'-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check id.fc2.com S...

chess24.com XSS vulnerability

Vulnerable URL: https://chess24.com/es?action="// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6742 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value...

McAfee VirusScan Enterprise for Windows scriptproxy COM object memory corruption vulnerability

Overview McAfee VirusScan Enterprise for Windows scriptproxy COM object contains a memory corruption vulnerability. Description According to the reporter, McAfee VirusScan Enterprise for Windows version 8.7i through at least 8.8 patch 7 contains a scriptproxy COM object that is vulnerable to the...

query123.com XSS vulnerability

Vulnerable URL: http://www.query123.com/"/1.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 812159 VIP website status:| No Check query123.com SSL connection:| Grade: A...

cns.888.com XSS vulnerability

Vulnerable URL: https://cns.888.com/downloadclient.htm/?wtv=%3C/script%3E%3Cscript%20src=https://openbugbounty.org/1.js%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

gallery.mobile9.com XSS vulnerability

Vulnerable URL: http://gallery.mobile9.com/c/ringtones/1/?st="// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

s2w2.com Open Redirect vulnerability

Vulnerable URL: https://www.s2w2.com/redirector.php?url=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 95445 VIP website status:| No Coordinated Disclosure Timeline:...

regalos21.com Open Redirect vulnerability

Vulnerable URL: http://www.regalos21.com/redir?q=http://openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:18 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 1094154 VIP website...

p22.com XSS vulnerability

Vulnerable URL: https://p22.com/find.php?search=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 923544 VIP...

yes24.com XSS vulnerability

Vulnerable URL: http://www.yes24.com/Cooperate/Yes24Gateway.aspx?ReturnURL=";alertOPENBUGBOUNTY;// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4345 VIP website status:| Yes Chec...

whfeeds.1and1.com XSS vulnerability

Vulnerable URL: https://whfeeds.1and1.com/stylepreview.php Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check whfeeds.1and1.com SSL connection:| Grade: C+...

vs4.com Open Redirect vulnerability

On the 19.11.2016 security researcher reported a Open Redirect vulnerability affecting the vs4.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 19 November, 20...

haber3.com XSS vulnerability

Vulnerable URL: http://www.haber3.com/contact.php Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5367 VIP website status:| Yes Check haber3.com SSL...

p22.com XSS vulnerability

Vulnerable URL: https://www.p22.com/find.php?search=" Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 22:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 923098 VIP website status:| No Check p22.com SSL...

passport.game321.com XSS vulnerability

Vulnerable URL: https://passport.game321.com/?mod=passport=index=facebookloginoauthmsg=json=prompt/OPENBUGBOUNTY/...

olay53.com XSS vulnerability

Vulnerable URL: http://www.olay53.com/xcommentpage.php?jsoncallback=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 203097 VIP website status:| No Check olay53.com SSL connection:...

shop.buy42.com XSS vulnerability

Vulnerable URL: http://shop.buy42.com/buy42/paimai.do?action=paimaiitem=prompt/OPENBUGBOUNTY/...

pazar53.com XSS vulnerability

Vulnerable URL: http://www.pazar53.com/xcommentpage.php?jsoncallback=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 467034 VIP website status:| No Coordinated Disclosure Timeline...