webmail.delta-yazilim.com Cross Site Scripting vulnerability OBB-3803724

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

chinafoodmachinery.com Cross Site Scripting vulnerability OBB-2455427

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Microsoft Windows jscript!NameTbl::GetValDef Use-After-Free Exploit

Exploit for windows platform in category dos / poc Windows: use-after-free in jscript!NameTbl::GetValDef CVE-2017-11903 There is a use-after-free vulnerability in jscript.dll. This issue could potentially be exploited through multiple vectors: - An attacker on the local network could exploit this...

kbsa.org.uk Open Redirect vulnerability

On the 19.11.2017 security researcher reported a Open Redirect vulnerability affecting the kbsa.org.uk website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 19 November...

microlab.uwyo.edu XSS vulnerability

Vulnerable URL: http://microlab.uwyo.edu/labs/labindex.asp?building=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

haa.su XSS vulnerability

Vulnerable URL: http://haa.su/?a=0=%22%3E%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E&=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E&result-url;=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E.VaVH-fn4d3A Details: Description| Value ---|--- Patched:| No Latest check f...

gardenvalleyproperties.com XSS vulnerability

Vulnerable URL: http://www.gardenvalleyproperties.com/searchresults.cfm?subdivision=%22%3E%3Cimg/src=x%20onerror=prompt%28/XSSPOSED/%29;%3E=Caldwell=subdivision Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:|...

Unfixed XSS vulnerability at www.thebig.tv

Security researcher cueballr, has submitted on 19/06/2008 a cross-site-scripting XSS vulnerability affecting www.thebig.tv, which at the time of submission ranked 490449 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. It is currentl...