WolfSight CMS 3.2 SQL Injection

Exploit Title: WolfSight CMS 3.2 - SQL Injection Google Dork: N/A Date: 2018-07-10 Exploit Author: Berk Dusunur & Zehra Karabiber Vendor Homepage: http://www.wolfsight.com Software Link: http://www.wolfsight.com Version: v3.2 Tested on: Parrot OS / WinApp Server CVE : N/A PoC Sql Injection...

mirion.com XSS vulnerability

Open Bug Bounty ID: OBB-642815 Description| Value ---|--- Affected Website:| mirion.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

resto.fr XSS vulnerability

Open Bug Bounty ID: OBB-632963 Description| Value ---|--- Affected Website:| resto.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wilsonpremierhyundai.financing.dealer.com XSS vulnerability

Open Bug Bounty ID: OBB-632389 Description| Value ---|--- Affected Website:| wilsonpremierhyundai.financing.dealer.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

statengeneraaldigitaal.nl XSS vulnerability

Open Bug Bounty ID: OBB-593439 Description| Value ---|--- Affected Website:| statengeneraaldigitaal.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

rubyonrailsupgrade.com XSS vulnerability

Open Bug Bounty ID: OBB-590097 Description| Value ---|--- Affected Website:| rubyonrailsupgrade.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

flareproject.com XSS vulnerability

Open Bug Bounty ID: OBB-456430 Description| Value ---|--- Affected Website:| flareproject.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

clubs.london.edu Open Redirect vulnerability

Vulnerable URL: http://clubs.london.edu/click?uid=11277236-d845-11e6-8706-0050569d64d5=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

Ubiquiti Inc.: [dev-nightly.ubnt.com] Local File Reading

Description Reading files outside the web root via path traversal PoC http GET /............................\etc\passwd HTTP/1.1 Host: dev-nightly.ubnt.com curl "https://dev-nightly.ubnt.com/......\etc\passwd" Result F213057...

video.cnfpt.fr XSS vulnerability

Vulnerable URL: http://video.cnfpt.fr/search/gsa/results?q=" Details: Description| Value ---|--- Patched:| Yes, at 19.12.2017 Latest check for patch:| 19.12.2017 11:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| ...

ramblersholidays.co.uk XSS vulnerability

Vulnerable URL: https://www.ramblersholidays.co.uk/search.aspx?searchtext=%22%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 10:25 GMT Vulnerability type:| XSS Vulnerability status:|...

SUSE-SU-2016:2579-1 Security update for sssd

This update for sssd fixes one security issue and three bugs. The following vulnerability was fixed: - CVE-2014-0249: Incorrect expansion of group membership when encountering a non-POSIX group. bsc880245 The following non-security fixes were also included: - Prevent crashes of statically linked...

croma.com XSS vulnerability

Vulnerable URL: http://www.croma.com/entertainment/c/4?q=" Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 10:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15156 VIP website status:| Yes Check croma.com S...

slugstore.ucsc.edu Open Redirect vulnerability

Vulnerable URL: http://slugstore.ucsc.edu/ePOS/form="cat.html=216=721 Details: Description| Value ---|--- Patched:| Yes, at 12.09.2017 Latest check for patch:| 12.09.2017 10:55 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

blocks.mc.blocks.mc.minecraft.blocks.mc.blocks.mc.minecraft.blocks.mc.blocks.mc.blocks.mc.blocks.mc.bobdawg.org XSS vulnerability

Vulnerable URL: http://blocks.mc.blocks.mc.minecraft.blocks.mc.blocks.mc.minecraft.blocks.mc.blocks.mc.blocks.mc.blocks.mc.www.bobdawg.org/gamercard.php?gamertag=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:|...

pspride.org Open Redirect vulnerability

Vulnerable URL: http://www.pspride.org/adserver/www/delivery/ck.php?oaparams=2bannerid=155zoneid=6cb=025a4afa16oadest=https://xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 29.01.2016 Latest check for patch:| 29.01.2016 16:30 GMT Vulnerability type:| Open Redirect Vulnerabili...

port3.ru Open Redirect vulnerability

Vulnerable URL: http://PORT3.ru/redirect.php?url=http://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 54115 Google Pagerank| 4 VIP website status:| No...

catalysis.ru Open Redirect vulnerability

Vulnerable URL: http://catalysis.ru/bitrix/rk.php?goto=https://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:38 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 2265642 Google...

alohatube.com Open Redirect vulnerability

Vulnerable URL: http://alohatube.com/ktm/view.cgi?i=27395289=https://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 21.09.2017 Latest check for patch:| 21.09.2017 11:37 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 1578 Google...

ir.cbbank.com Open Redirect vulnerability

Vulnerable URL: http://ir.cbbank.com/PDFPageView.aspx?iid=100224=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 16.03.2016 Latest check for patch:| 16.03.2016 04:22 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 366008...