GHSA-9J5M-873F-XH76 Directory Traversal in static-html-server

Affected versions of static-html-server resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system...

PT-2018-10598 · Windscribe +1 · Windscribe +1

Name of the Vulnerable Software and Affected Versions: Windscribe version 1.81 Description: The issue concerns the VPN component in Windscribe, which uses the OpenVPN client and creates a system process named WindScribeService.exe. This process establishes a named pipe endpoint,...

PT-2018-5638 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A denial of service issue exists in the web server functionality. It can be triggered by a specially crafted HTTP URI, specifically a GET request to "/MOXA LOG.ini" without a cookie header,...

PT-2018-3544 · Zziplib +6 · Zziplib +6

Name of the Vulnerable Software and Affected Versions: ZZIPlib versions 0.13.68 Description: The issue is related to a memory leak in the zzip mem disk new function of the ZZIPlib library. This leak occurs due to a resource not being released after its expiration. An attacker, potentially acting...

webovej.cz XSS vulnerability

Vulnerable URL: http://www.webovej.cz/index.php?a=search=13'"220.ro Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...

sutcliffe.co.uk XSS vulnerability

Vulnerable URL: http://www.sutcliffe.co.uk/results.php?q=%27%22%3E%3Csvg%2Fonload%3Dconfirm%28%2FOPENBUGBOUNTY%2F%29%3E=Search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 146872...

you-rope.net Open Redirect vulnerability

Vulnerable URL: http://www.you-rope.net/en/clickout?redirecturl=http%253A%252F%252Fopenbugbounty.org%252Fen%252Fprod%252Fssd-wrk-651%252F=293 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.11.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly...

smv.to XSS vulnerability

Vulnerable URL: http://smv.to/search?keyword=%3Cscript%3Ealert%22XSSPOSED%22%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3498 VIP website status:| Yes Coordinated...

rapidfirecms.com XSS vulnerability

Vulnerable URL: http://www.rapidfirecms.com/templates/luk/page/pagestandard.php?secID=1045=%22%3Etrolo%3Ci%3Etralala%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:...

Directory Traversal

Overview Affected versions of serveryaozeyan resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable...

elle.com.hk XSS vulnerability

Vulnerable URL: http://www.elle.com.hk/tag/retr0"autofocusonfocus="alertxssposed'-confirmOPENBUGBOUNTY-'/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 50041 VIP website status:| ...

youfacebookclip.com XSS vulnerability

Vulnerable URL: http://www.youfacebookclip.com/search.php?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 137761 VIP website status:| No Check youfacebookclip.com SSL connection...

Downloads Resources over HTTP

Overview Affected versions of windows-seleniumjar insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

Downloads Resources over HTTP

Overview Affected versions of mystem insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...

Downloads Resources over HTTP

Overview Affected versions of webdriver-launcher insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

numero.com XSS vulnerability

Vulnerable URL: http://www.numero.com/fr/search-articles?keyword=--%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 388382 VIP...

soblacktie.com XSS vulnerability

Vulnerable URL: http://www.soblacktie.com/apps/search?s=%3C%2Ftitle%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2488837 VIP...

insur-info.ru Open Redirect vulnerability

Vulnerable URL: http://www.insur-info.ru/freejump/?url=www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 214225 VIP website status:| No Check...

comef.it XSS vulnerability

Vulnerable URL: http://www.comef.it/simili.asp?pp=no=1%22--%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3E01208100 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11407093 VIP website...

munkaugyes.hu XSS vulnerability

Vulnerable URL: http://www.munkaugyes.hu/search.php?s=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculate...