LocalTapiola: Enumeration in unsubscribe -function of /omatalousuk (viestinta.lahitapiola.fi)

Hi, I would like to report an issue where malicious user can unsubscribe any customer email subscription from viestinta.lahitapiola.fi. I am not sure if this in scope, but i took the liberty to bring forward to you, so that you can fix the bug. Impact Subscribe or unsubscribe is always a...

HackerOne in the third quarter TOP 5 vulnerability report-vulnerability warning-the black bar safety net

Foreword HackerOne in the third quarter TOP 5 vulnerability reports are coming announced. In this season, we participated in the Vegas hacker conference, hosted Hacked the World, and in the Reddit discussion above, some of the HackerOne problem. HackerOne vulnerability report from platform to...

login.moneyrush.com XSS vulnerability

Vulnerable URL: http://login.moneyrush.com/email-unsubscribe.php?u=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check login.moneyrush.com SSL connection:|...

SQL Injection Vulnerability in the Reason Parameter of the /www/index.php Page of Pleasant Reading Media's Digital Newspaper System

Joy Reading Kiosk Digital Newspaper System is a digital newspaper WEB management system. There is a SQL injection vulnerability in this product, the vulnerability URL is: /www/index.php?mod=admin&con=Subscribe&act=unsubscribeList&reason=1, the vulnerability parameter is: reason, the attacker can...

id.bayan.ir XSS vulnerability

Vulnerable URL: http://id.bayan.ir/bayan/dynaform/mlunsubscribe/s/-/0?sk=test=academy= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| ...

newsletter.atlantisnet.com XSS vulnerability

Vulnerable URL: http://newsletter.atlantisnet.com/Unsubscribe.cfm?Email='" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

Uber: SQL Injection on sctrack.email.uber.com.cn

Hi, Uber Security team I just traveled to China, when I call Uber in China. I received an advertisement mail from Uber and I found the unsubscribe link is different from the original unsubscribe link, and there is a SQL Injection under the unsubscribe link. You can see where to find the unsubscri...

makeadifference.com XSS vulnerability

Vulnerable URL: http://makeadifference.com/UNsubscribe.htm?e=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4665255 VIP website...

hairtools.dk XSS vulnerability

Vulnerable URL: https://hairtools.dk/services/[email protected]=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

riyadhchamber.com XSS vulnerability

Vulnerable URL: http://www.riyadhchamber.com/unsubscribe.php?em=%22%3E%3Cimg%20src=%22x%22%20onerror=alert%28/openbugbounty/%29%3E.png Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

domainhost.com XSS vulnerability

Vulnerable URL: http://www.domainhost.com/utils/UnSubscribeMe.bml?Name=JUSTXSSS=EstrellaWarBirdsNews=%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:|...

columbiadomains.net XSS vulnerability

Vulnerable URL: http://www.columbiadomains.net/utils/UnSubscribeMe.bml?Name=JUSTXSSS=EstrellaWarBirdsNews=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

freeyellow.com XSS vulnerability

Vulnerable URL: https://www.freeyellow.com/utils/UnSubscribeMe.bml?Name=JUSTXSSS=EstrellaWarBirdsNews=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 507010 VIP website status:| N...

易想团购 subscribe.php unsubscribe参数 SQL注入

No description provided by source...

Uber: Unsubscribe any user from receiving email

hi, At url https://www.uber.com/unsubscribe you can unsubscribe any email of any user, which is bit of concern for the people who wants to receive emails from uber. only people who gets email from uber should be allowed to unsubscribe themselves from uber emails rather than anybody unsubscribing...

unsubscribe.psychtests.com XSS vulnerability

Vulnerable URL: http://unsubscribe.psychtests.com/NoEmailsPlease.htm?emailaddr=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

homekit.com.au XSS vulnerability

Vulnerable URL: https://www.homekit.com.au/perl/unsubscribe.pl Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11854904 Google Pagerank| 0 VIP website status:| No Check homekit.com....

aquatherm.co.nz XSS vulnerability

Vulnerable URL: http://www.aquatherm.co.nz/ems/emailunsubscribe.cfm?emailaddress=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

emailrail.com XSS vulnerability

Vulnerable URL: http://www.emailrail.com/unsubscribe.cfm?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

napil.com XSS vulnerability

Vulnerable URL: http://www.napil.com/newsletter/unsubscribe.asp?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1989291 Google...