Mail.ru: XSS в отправителе, БЕТА-версия почты

Reflected user-assisteted XSS in "Unsubscribe" beta feature via crafted e-mail From: header...

CVE-2017-17451

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php...

CVE-2017-17451

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php...

CVE-2017-17451

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php...

Code injection

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php...

WordPress WP Mailster Plugin Cross-Site Scripting Vulnerability

WP Mailster is a WordPress plugin that allows your users to be part of a group and communicate via email without having to log into your website. A cross-site scripting vulnerability exists in the unsubscription handler in the WordPress plugin WP Mailster before 1.5.5. An attacker can exploit thi...

CVE-2017-17451

CVE-2017-17451 affects WordPress WP Mailster plugin versions before 1.5.5. It is a cross-site scripting (XSS) vulnerability in the unsubscribe handler (view/subscription/unsubscribe2.php) exploitable via the mes parameter. Impact, as described: an attacker could inject malicious scripts into page...

CVE-2017-17451

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php...

CVE-2014-2023

Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allow remote attackers to execute arbitrary SQL commands via a crafted xmlrpc API request to 1 unsubscribeforum.php or 2 unsubscribetopic.php in mobiquo/functions/...

Inflection: Unsubscribe Any User

Researcher reported that HubSpot's "unsubscribe" feature allows any user to unsubscribe from marketing emails without having to confirm their email address. Inflection does not consider this a vulnerability, as we want to make it as easy as possible for users to stop receiving marketing emails th...

mesalva.com XSS vulnerability

Vulnerable URL: https://mesalva.com/forum/email/[email protected]%27%22%3E%3Csvg/onload=alert/openbugbounty/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 81639 VIP website status:| No...

indiaproperty.com XSS vulnerability

Vulnerable URL: https://www.indiaproperty.com/unsubscribe/mailerunsubscribe.php?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Boozt Fashion AB: [www.boozt.com] - Authentication bypass

Description I have found a flaw in the authentication process when accessing the website by visiting an unsubscribe link. PoC 1. Visit http://click.email.boozt.com/?qs=723df61c937e4dbf9e378d2157f7907baa95fa00699f2b4d13e192b1d14ed67323d5c7a75c6f801baf1e68c2beabbc43d574caeb9b6f8c085971631d636b3cda ...

Mail.ru: XSS в письме, в поле отправителя.

User-assisted XSS in message reading Unsubscribe feature via crafted List-Unsubscribe header in e.mail.ru Web mail interface...

enews.washington.org XSS vulnerability

Vulnerable URL: http://enews.washington.org/leisure/unsubscribe.php?segmentid=1"...

newsletter.visitgrandjunction.com XSS vulnerability

Vulnerable URL: http://newsletter.visitgrandjunction.com/unsubscribe.php?segmentid=1"...

Nextcloud: IDOR unsubscribe Anyone from NextClouds Newsletters by knowing their Email

Hi Team, I Was Looking around your website and then I found a subdomain newsletter.nextcloud.com on the main page it shows us 3 Options i choose 1st that was Subscribe to our newsletter , Then I click on this Option and I was Taken to https://newsletter.nextcloud.com/?p=subscribe&id=1 The page...

graduate-jobs.com XSS vulnerability

Vulnerable URL: http://www.graduate-jobs.com/unsubscribe.jsp?email="--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 119944 VIP website status:| No Check graduate-jobs.com SSL...

fairwaystyles.com XSS vulnerability

Vulnerable URL: https://www.fairwaystyles.com/unsubscribe?eid=%22/%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1337131 VIP website status:| No Check fairwaystyles.com...

news.citigroup.com XSS vulnerability

Vulnerable URL: https://news.citigroup.com/unsubscribe.asp Details: Description| Value ---|--- Patched:| Yes, at 16.02.2017 Latest check for patch:| 16.02.2017 10:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...