WordPress Plugin Admin Menu Tree Page View 2.6.9 - Cross-Site Request Forgery / Privilege Escalation

Exploit Title: Admin Menu Tree Page View CSRF, Privilege Escalation Discovery Date: 2017-12-12 Exploit Author: Panagiotis Vagenas Author Link: https://twitter.com/panVagenas Vendor Homepage: http://eskapism.se/ Software Link: https://wordpress.org/plugins/admin-menu-tree-page-view Version: 2.6.9...

gerflor.ae XSS vulnerability

Vulnerable URL: http://www.gerflor.ae/search.html?search=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1716535 VIP website status:| No Coordinated...

katholisch-backnang.de XSS vulnerability

Vulnerable URL: https://katholisch-backnang.de/popup/email.php?emailname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E\n Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4994323 VIP website status:| No Coordinated...

savefrom1.online XSS vulnerability

Vulnerable URL: http://savefrom1.online/search.php/x%22%3E%3CsvG%20onLoad=prompt9%3E/?search=DZP-ROOBAI Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 447212 VIP website status:| No Coordinated Disclosure...

naromtravel.com.mk Open Redirect vulnerability

Vulnerable URL: http://www.naromtravel.com.mk/reklamaClick.aspx?url=http://openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 17807485 VIP website status:| No Coordinated Disclosure...

jicstest.southeasttech.edu XSS vulnerability

Vulnerable URL: https://jicstest.southeasttech.edu/ICS/?tool=search=sdfg%22%27--!%3E%3CScript%20/K/%3Econfirm%271%27%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

iyfipgun.com XSS vulnerability

Vulnerable URL:...

andrewstephensonmp.co.uk XSS vulnerability

Vulnerable URL: http://www.andrewstephensonmp.co.uk/search.php Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11698414 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

voucherhoney.co.uk XSS vulnerability

Vulnerable URL: https://www.voucherhoney.co.uk/se/%2522%253E%2527%253EI%253Ci%253EI%253Csvg%252Fonload%253Dalert%2528%252Fopenbugbounty%252F%2529%253E.html Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 145764 V...

arcpublications.co.uk XSS vulnerability

Vulnerable URL: https://www.arcpublications.co.uk/search.php?q="\n Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10604202 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

lizandstu.com XSS vulnerability

Vulnerable URL: https://www.lizandstu.com/yelland/browsemedia.php?mediasearch=bug=headstones=Relatives="%20autofocus%20onfocus=alert%60OPENBUGBOUNTY%60%20 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 15.01.2018 Vulnerability type:| XSS...

3ppp3.dk XSS vulnerability

Vulnerable URL: https://www.3ppp3.dk/en/search?query=w%27" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description| Value...

Yet Another Linux Kernel Privilege-Escalation Bug Discovered

Security researchers have discovered a new privilege-escalation vulnerability in Linux kernel that could allow a local attacker to execute code on the affected systems with elevated privileges. Discovered by Venustech ADLab Active-Defense Lab researchers, the Linux kernel vulnerability...

forum.kudo3d.com XSS vulnerability

Vulnerable URL: https://forum.kudo3d.com/email/[email protected]%27%22%3E%3Csvg/onload=alert/openbugbounty/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

zementwaren-shop.ch XSS vulnerability

Vulnerable URL: https://www.zementwaren-shop.ch/bin/srves.exe/loadhtml?file=ho%3Cimg%20src=x%20onerror=alert%22OPENBUGBOUNTY%22;%3Ea.html Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated V...

gzly.mofcom.gov.cn XSS vulnerability

Vulnerable URL: http://gzly.mofcom.gov.cn/website/face////wwwfacehistory.jsp?desc="page=5no=1417 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...

bigdayentertainment.com XSS vulnerability

Vulnerable URL: http://www.bigdayentertainment.com/displaycontent.php?CatID=13'"6=30 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16364755 VIP website status:| No Coordinated Disclosure Timeline: Description|...

skaarupimcase.zebrasite.dk Open Redirect vulnerability

Vulnerable URL: http://skaarupimcase.zebrasite.dk/v3/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed...

waysurf.com Open Redirect vulnerability

Vulnerable URL: http://www.waysurf.com/linkvisita.php?id=94504=http%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

painlux.be Open Redirect vulnerability

Vulnerable URL: http://painlux.be/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...