discountstorehawaii.com XSS vulnerability

Open Bug Bounty ID: OBB-584309 Description| Value ---|--- Affected Website:| discountstorehawaii.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

poly-shop-discount.ch XSS vulnerability

Open Bug Bounty ID: OBB-555871 Description| Value ---|--- Affected Website:| poly-shop-discount.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

discount-supplements.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-484401 Description| Value ---|--- Affected Website:| discount-supplements.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

accessoire-piscine-discount.com XSS vulnerability

Open Bug Bounty ID: OBB-367747 Description| Value ---|--- Affected Website:| accessoire-piscine-discount.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

telunjuk.com XSS vulnerability

Vulnerable URL: https://www.telunjuk.com/jual?isdiscounti=1=+amp+=2prompt/OPENBUGBOUNTY/...

Visit Wallarm at AWS re:Invent 2017

Wallarm will present its Application Security solutions at AWS re:Invent in Las Vegas November 27 through December 1st. As a leading provider of AI-driven application security, Wallarm is helping customers running on AWS to implement application security. Wallarm solutions includes high-performan...

Wallarm at NGINX.conf

Wallarm is proud to be a gold sponsor of NGINX 2017. nginx.conf is an annual conference for technical professionals who are passionate about delivering better application and web performance. The event takes place on September 6–8 at the Nines Luxury Hotel in Portland, OR. Join us at the...

slimewave.com XSS vulnerability

Vulnerable URL: http://slimewave.com/discount/girl.php?slug="terajoy Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 542624 VIP website status:| No Check slimewave.com SSL connection:| Grade: A Coordinated...

webspace-discount-24.de XSS vulnerability

Open Bug Bounty ID: OBB-226493 Description| Value ---|--- Affected Website:| webspace-discount-24.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mm.discountflights.com XSS vulnerability

Vulnerable URL: http://www.mm.discountflights.com/dynamic-flight-result.php?air-radio=on=%27%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E%22==%27%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E%22==03%2F12%2F17=03%2F12%2F17=1=0=0=Economylanguage=en-UScurrency=USD=2 Details:...

telunjuk.com XSS vulnerability

Vulnerable URL: https://www.telunjuk.com/jual?isdiscounti=1=+amp+=2prompt/OPENBUGBOUNTY/...

hyatt.com XSS vulnerability

Vulnerable URL: https://www.hyatt.com/content/partnerlandingpage/en/corporate/global/hyatt-member-discount.html?icamp=";alertOPENBUGBOUNTY;// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

123

STR: 1/ Go to discount calculetor http://www.nibulon.com/data/zakupivlya-silgospprodukcii/kalkulyator-znizhok.html 2. Enter value '9999999999999999999999999999999999999999999999999999999999999999' into 'Виберіть показник вологості' file Enter some vald value 'Виберіть показник сміттєвої домішки' ...

Yahoo / Verizon: A $1B Data Breach Discount?

In July of this year Verizon announced it was going to buy Yahoo for $4.8B. A few weeks later, Yahoo starts investigating a potential data breach of around 200 million records that were for sale on the Dark Web. In mid-September, Yahoo discloses that sometime in 2014, they were attacked and rough...

Discount Bank - Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Discount Bank published at the 'play' market has multiple vulnerabilities...

email-discount-london.com XSS vulnerability

Vulnerable URL: https://email-discount-london.com/login.php?message=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:|...

studentbeans.com XSS vulnerability

Vulnerable URL: https://www.studentbeans.com/student-discount/uk/results?query=%3C/stYle/%3C/titLe/%3C/teXtarEa/%3C/scRipt/--!%3E\spam404/%3CsVg/oNloAd=alert%28/XSSPOSED/%29//%3E\x3e Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS...

Shopify: Stored XSS via "Free Shipping" option (Discounts)

POC steps: 1 Go to the customers page and add a new search group named as "img src=x onerror=prompt7 see img1.png 2 Go to the discounts page, create a new discount code and mark the "Free Shipping" option. 3 Open a web proxy i.e. tamper data and press the "save discount" button. 4 Through the web...

New OAuth book: OAuth 2 in Action

Justin Richer and myself have been writing a book about OAuth. It gives a deep look at the OAuth 2.0 protocol including hands on examples and practical implementation vulnerabilities to avoid. You can preorder the book today or you can download the first chapter for free on the publisher’s websit...

CVE-2015-4358

Cross-site scripting XSS vulnerability in unspecified administration pages in the Ubercart Discount Coupons module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to taxonomy terms...