hormuzbay.com XSS vulnerability

Open Bug Bounty ID: OBB-455025 Description| Value ---|--- Affected Website:| hormuzbay.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Dup Scout Enterprise 10.0.18 Buffer Overflow Exploit

This Metasploit module exploits a stack buffer overflow in Dup Scout Enterprise version 10.0.18. The buffer overflow exists via the web interface during login. This gives NT AUTHORITY\SYSTEM access. This module requires Metasploit: https://metasploit.com/download Current source:...

goglio.it XSS vulnerability

Open Bug Bounty ID: OBB-447259 Description| Value ---|--- Affected Website:| goglio.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

macOS High Sierra - Root Privilege Escalation (CVE-2017-13872)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Mac OS X Root Privilege Escalation', 'Description' = %q This module exploits a serious flaw in MacOSX High Sierra. Any user can login with user...

czasdzieci.pl XSS vulnerability

Open Bug Bounty ID: OBB-442286 Description| Value ---|--- Affected Website:| czasdzieci.pl Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

reshowcase.net XSS vulnerability

Open Bug Bounty ID: OBB-441331 Description| Value ---|--- Affected Website:| reshowcase.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

northzone.com XSS vulnerability

Open Bug Bounty ID: OBB-432237 Description| Value ---|--- Affected Website:| northzone.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

style7.kr XSS vulnerability

Open Bug Bounty ID: OBB-429154 Description| Value ---|--- Affected Website:| style7.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

intend.ro XSS vulnerability

Open Bug Bounty ID: OBB-424081 Description| Value ---|--- Affected Website:| intend.ro Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

triotronik.com XSS vulnerability

Vulnerable URL: https://www.triotronik.com/?sid=%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1053152 VIP website status:| No Coordinated Disclosure Timeline:...

goldmixx.org XSS vulnerability

Open Bug Bounty ID: OBB-413971 Description| Value ---|--- Affected Website:| goldmixx.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

Threatpost News Wrap Podcast for Nov. 10

Threatpost editors Mike Mimoso and Tom Spring discuss the week’s information security news, including Chris Valasek’s and Charlie Miller’s return to the security speaking rounds, a phony WhatsApp download pulled from Google Play, a deep dive into the recent cloud-based storage leaks, and the rece...

rtbf.be XSS vulnerability

Vulnerable URL: https://www.rtbf.be/webcreation/webseries/pls/articlepls-la-story-snapchat-suivie-par-20-000-jeunes?id=9734305"onmouseover="alert/OPENBUGBOUNTY/"&= Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 12:01 GMT Vulnerability type:| X...

kookboekenshop.nl XSS vulnerability

Vulnerable URL: http://www.kookboekenshop.nl/search.php?searchinput=%27%22%3E%3Csvg%2Fonload%3Dconfirm%28%2FOPENBUGBOUNTY%2F%29%3E=Zoeken Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3928440 VIP website status...

gotovan.com XSS vulnerability

Vulnerable URL: http://gotovan.com/manual/view.php?id="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1942474 VIP website status:| No Coordinated Disclosure Timeline:...

mitodyn.org XSS vulnerability

Vulnerable URL: http://mitodyn.org/variants.php?action=viewuniquedb=OPA1%22/%3E%3Csvg/onload=alert%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

narosa.com XSS vulnerability

Vulnerable URL: http://www.narosa.com/search.asp?ufield=ISBN=%22%3E%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3E=2&image7.x;=12&image7.y;=14 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.11.2017 Vulnerability type:| XSS Vulnerability status:|...

th.fashionnetwork.com XSS vulnerability

Vulnerable URL: http://th.fashionnetwork.com/search/?p0=rootbyte Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...

0594333.com XSS vulnerability

Vulnerable URL: http://www.0594333.com/%22%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E%20-p-2.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 581383 VIP website...

ubuy.com.kw XSS vulnerability

Vulnerable URL: https://www.ubuy.com.kw/lg-cm4650-mini-hi-fi-bluetooth-wireless-system.html!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 23:24 GMT Vulnerability type:| XSS...