CVE-2017-0885

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share. Due to an error in the application logic an adversary with access to a write-only share may enumerate the names of existing files and subfolders by comparing the exception...

fundays.ie XSS vulnerability

Vulnerable URL: https://www.fundays.ie/listings.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1070532 VIP website status:| No Check fundays.ie SSL connection:| Grade: A-...

prix.net XSS vulnerability

Vulnerable URL: https://www.prix.net/prix/?q= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 126509 VIP website status:| No Check prix.net SSL connection:| Grade: A+ Coordinated Disclosure Timeline: Description|...

Microsoft XML Core Services Information Disclosure Vulnerability (CNVD-2017-03862)

Microsoft Windows is an operating system developed by Microsoft. A security vulnerability in the handling of memory objects by Microsoft XML Core Services allows remote attackers to submit special requests to obtain sensitive information, such as determining whether a file exists on disk...

ahd.com XSS vulnerability

Vulnerable URL: https://www.ahd.com/search.php/%27%22--!%3E%3CScript%20/K/%3Econfirm%60OPENBUGBOUNTY%60%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 333130 VIP...

moodjuice.scot.nhs.uk XSS vulnerability

Vulnerable URL:...

st-florian.at XSS vulnerability

Vulnerable URL: http://www.st-florian.at/system/web/suche.aspx?search='-confirmopenbugbounty-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6843135 VIP website status:| No Check...

vodapark.eu XSS vulnerability

Vulnerable URL: http://www.vodapark.eu/modules/modjmssupport/sendmessage.php?type=skype=vodapark'"--!=vodapark Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9886939 VIP website status:| No Check vodapark.eu SSL...

bmw.dk XSS vulnerability

Vulnerable URL: http://www.bmw.dk/da/publicPools/search-results/search-results.htmleyJxIjoiJTIyJTNFJTNDaW1nJTIwc3JjJTNEeCUyMG9uZXJyb3IlM0Rwcm9tcHQoJTJGT1BFTkJVR0JPVU5UWSUyRiklM0UifQ== Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly...

denmark.hermes.com XSS vulnerability

Vulnerable URL:...

careerone.com.au Open Redirect vulnerability

Vulnerable URL: https://www.careerone.com.au/talentpools/accounting/search?searchcompany=keywords=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 24119 VIP website...

megafiletube.unblocked.onl XSS vulnerability

Vulnerable URL: https://megafiletube.unblocked.onl/download.php?id=19384"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

ncaor.gov.in XSS vulnerability

Vulnerable URL: http://ncaor.gov.in/jwplr/player.swf?debug=promptOpenbugbounty Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 387209 VIP website status:| No Check ncaor.gov.in SSL...

verifone.com.au XSS vulnerability

Vulnerable URL: http://www.verifone.com.au/jump.aspx?extlink=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7246930 VIP website status:| No...

playstationtheater.com IFRAME Injection vulnerability

Vulnerable URL: http://www.playstationtheater.com/events/search?cx==FORID:9=UTF-8=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 1008650 VIP website status:| No...

Directory traversal

The patch for directory traversal CVE-2017-5480 in b2evolution version 6.8.4-stable has a bypass vulnerability. An attacker can use ../ to bypass the filter rule. Then, this attacker can exploit this vulnerability to delete or read any files on the server. It can also be used to determine whether...

southwestfarmpress.com XSS vulnerability

Vulnerable URL: http://www.southwestfarmpress.com/search/node/test%27%22--%21%3E%3CImage%0CSrcset%3D.%0COnerror%3Dconfirm%60openbugbounty%60%20/// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

rbwonline.de XSS vulnerability

Vulnerable URL: http://www.rbwonline.de/rbwaktuell.php?cmd=2017-01-14' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2001566 VIP website status:| No Check rbwonline.de SSL...

hyogo-caremanet.com XSS vulnerability

Vulnerable URL: http://www.hyogo-caremanet.com/cp-bin/blog/index.php/' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4297748 VIP website status:| No Check hyogo-caremanet.com SSL...

histoire-politique.fr XSS vulnerability

Vulnerable URL: http://www.histoire-politique.fr/index.php?numero=23%27"--!confirmOPENBUGBOUNTY%3C/script /K/=dossier=220' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5373819 VI...