Possible DOS attack with long user-submitted passwords (correct fix for CVE-2013-5958)

See https://twitter.com/CiPHPerCoder/status/1050427719941525504 for discussion...

Design/Logic Flaw

In ProConf before 6.1, an Insecure Direct Object Reference IDOR allows any author to view and grab all submitted papers Title and Abstract and their authors' personal information Name, Email, Organization, and Position by changing the value of Paper ID the pid parameter...

CVE-2018-16606

In ProConf before 6.1, an Insecure Direct Object Reference IDOR allows any author to view and grab all submitted papers Title and Abstract and their authors' personal information Name, Email, Organization, and Position by changing the value of Paper ID the pid parameter...

Cross site scripting

The NotificationRepresentationFactoryImpl class in Atlassian Universal Plugin Manager before version 2.22.9 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the name of user submitted add-on names...

RGui 3.4.4 - Local Buffer Overflow

!/usr/bin/python Exploit Author: bzyo CVE: CVE-2018-9060 Twitter: @bzyo Exploit Title: R 3.4.4 - Local Buffer Overflow Date: 03-27-2018 Vulnerable Software: R 3.4.4 Vendor Homepage: https://www.r-project.org/ Version: 3.4.4 Software Link: https://cloud.r-project.org/bin/windows/ Tested On: Window...

CVE-2018-1362

IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 within Citizen Portal could allow an authenticated user to withdraw other user's submitted applications from the system and possibly obtain privileges. IBM X-Force ID: 137380...

gophersport.com XSS vulnerability

Vulnerable URL: https://www.gophersport.com/account/register.cfm Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 193751 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

bmhs-la.org XSS vulnerability

Vulnerable URL: http://www.bmhs-la.org/apps/pages/index.jsp?uRECID=100378=dID=video=1ID=161882%22--!%3E%3CSvg/OnLoad=confirmdocument.domain%3E%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1631473 VIP websit...

gprep.com XSS vulnerability

Vulnerable URL: https://www.gprep.com/apps/pages/index.jsp?uRECID=263262=dID=video=1ID=56492%22--!%3E%3CSvg/OnLoad=confirmdocument.domain%3E%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5608808 VIP website...

monfinancier.com XSS vulnerability

Vulnerable URL: https://www.monfinancier.com/recherche?q=Try%22%27--!%3E%3CScript%20/K/%3Econfirm1%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 229637 VIP website status:| No Coordinated...

tcxfund.com Open Redirect vulnerability

Vulnerable URL: https://www.tcxfund.com/sites/all/modules/pubdlcnt/pubdlcnt.php?file=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 4017884 VIP website status:| No...

torrentz4.cx XSS vulnerability

Vulnerable URL: https://torrentz4.cx/?q=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 227364 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Ope...

thewordcracker.com XSS vulnerability

Vulnerable URL: https://www.thewordcracker.com/?s=%3C/script%3E%3Csvg%2Fonload%3Dconfirm%2FOPENBUGBOUNTY%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 176594 VIP website...

clear-reports.com XSS vulnerability

Vulnerable URL: https://www.clear-reports.com/sys/login.php/%22'--!%3E%3CScript%20/K/%3Econfirm'openbugbounty'%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 150741 VIP website status:| No...

nyaatorrents.top XSS vulnerability

Vulnerable URL: https://nyaatorrents.top/?q=%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9216141 VIP website status:| No Coordinated Disclosure Timeline:...

evarich.com.tw XSS vulnerability

Vulnerable URL: https://www.evarich.com.tw/en/search/index.html?q=%E2%80%9C/%3E%E2%80%99%3E/%3E%3E%22%3E%3Cimg%20src=1%20onerror=promptdocument.domain;%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2865976 V...

minube.com XSS vulnerability

Vulnerable URL: https://www.minube.com/aeropuertos/ABZ'%22%26%25%3Cxss%3E%3CScRiPt%20%3Ealert'OpenBugBounty'%3C/ScRiPt%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3599 VIP website status:| Yes Coordinated...

ik3qar.it Open Redirect vulnerability

Vulnerable URL: http://www.ik3qar.it/utility/apriurl.php?tit=SM3CER%A0contest%A0page=http://openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 1777780 VIP website status:| No Coordinated...

irinjalakuda.com XSS vulnerability

Vulnerable URL: http://www.irinjalakuda.com/feature.php?id=d3v2%22%3E%3CimG%2FsRc%3Dl+oNerrOr%3Dprompt/OPENBUGBOUNTY/+x%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 339641 VIP website status:| No Coordinate...

triotronik.com XSS vulnerability

Vulnerable URL: https://www.triotronik.com/?sid=%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1053152 VIP website status:| No Coordinated Disclosure Timeline:...