last-memories.com XSS vulnerability

Open Bug Bounty ID: OBB-511817 Description| Value ---|--- Affected Website:| last-memories.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

January 9, 2017 – Morning Cyber Coffee Headlines – “NCAA Football National Championship” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! January 9, 2018 - Headlines Carbon Black in the News: Ransomware is now estimat...

Biometric Shift Employee Management System Cross-Site Scripting Vulnerability (CNVD-2018-01395)

Biometric Shift Employee Management System is an employee management system. A cross-site scripting vulnerability exists in Biometric Shift Employee Management System. The vulnerability can be exploited via the LastName parameter in the index.php?user=ajax request...

CVE-2017-17995

Biometric Shift Employee Management System has XSS via the LastName parameter in an index.php?user=ajax request...

Excerpts from The Ransomware Economy: Projections

Carbon Black recently published an investigative report on the Dark Web marketplace for ransomware. This is the final excerpt from that report, which you can find here. For more information about the rise of ransomware, and what you can do about it, check out the Ransomware Epidemic: Stop Bad...

tnftp - 'savefile' Arbitrary Command Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'tnftp "savefile" Arbitrary Command Execution', 'Description' = %q This module exploits an arbitrary command execution vulnerability in tnftp's...

tsm-models.com XSS vulnerability

Vulnerable URL: http://www.tsm-models.com/product-search-result.php?shkeyword=alfa%20romeo=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

sincroniai.com XSS vulnerability

Vulnerable URL: http://www.sincroniai.com/es/%22+%3E%3C%252Fsvg%3E%3C%252F|%3E%3Csvg%252Fonload=prompt2%3E/7/0-0-g-p-0/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Infogram: Incorrect Functionality of Password reset links

Vulnerability:- -Password reset links should work in such a way that "only the last generated password reset link should be valid" i.e; if two tokens are generated at a time, then 2nd token must work and 1st token must be invalid. -If not, another case is that "if some number of reset links are...

clark-debisschop.co.uk XSS vulnerability

Vulnerable URL: http://clark-debisschop.co.uk/tng/browsemedia.php?mediasearch=bug=headstones=Relatives=%22%20autofocus%20onfocus=alert%60OPENBUGBOUNTY%60%20 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicl...

parallelozero.com XSS vulnerability

Vulnerable URL: http://www.parallelozero.com/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2653992 VIP website status:| No Coordinated Disclosure Timeline: Description|...

en.openlanguageexchange.com XSS vulnerability

Vulnerable URL: https://en.openlanguageexchange.com/search.php?country=Qatar=1%27%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

drumspeech.com XSS vulnerability

Vulnerable URL: http://www.drumspeech.com/articles.php?id=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 169574 VIP website status:| No Coordinated Disclosure Timeline:...

frankonia-shop.de XSS vulnerability

Vulnerable URL: http://www.frankonia-shop.de/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

users.miamioh.edu XSS vulnerability

Vulnerable URL: http://www.users.miamioh.edu/jacksbm/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

centerofthewest.libraryhost.com XSS vulnerability

Vulnerable URL: http://centerofthewest.libraryhost.com/index.php?p=collections/research=email=1=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

dvf.com XSS vulnerability

Vulnerable URL: http://www.dvf.com/search/?q=aids',;alert'openbugbounty';dataLayer.push'ProductListing':'SearchTerm': 'aids Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 85796 VIP...

thefirm.moneycontrol.com XSS vulnerability

Vulnerable URL: http://thefirm.moneycontrol.com/articals.php?category=13'"9=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

hozvo.ru XSS vulnerability

Vulnerable URL: http://hozvo.ru/?search=%22%3E%3Csvg%20onload=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 158450 VIP website status:| No Coordinated...

5vin.biz XSS vulnerability

Vulnerable URL: http://5vin.biz/?a=support Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1704017 VIP website status:| No Check 5vin.biz SSL connection:| Grade: F Coordinated...