josbank.com XSS vulnerability

Open Bug Bounty ID: OBB-676925 Description| Value ---|--- Affected Website:| josbank.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

emlak.mitula.com.tr XSS vulnerability

Open Bug Bounty ID: OBB-676835 Description| Value ---|--- Affected Website:| emlak.mitula.com.tr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

television.linternaute.com XSS vulnerability

Open Bug Bounty ID: OBB-676796 Description| Value ---|--- Affected Website:| television.linternaute.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

seo.new-web.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-676451 Description| Value ---|--- Affected Website:| seo.new-web.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

U.S. Mobile Giants Want to be Your Online Identity

The four major U.S. wireless carriers today detailed a new initiative that may soon let Web sites eschew passwords and instead authenticate visitors by leveraging data elements unique to each customer's phone and mobile subscriber account, such as location, customer reputation, and physical...

CVE-2016-9048

TALOS-2017-0313 documents CVE-2016-9048 as multiple SQL injection vulnerabilities in ProcessMaker Enterprise Core 3.0.1.7-community. Exploitation occurs via specially crafted web requests that inject SQL in various endpoints (e.g., eventsAjax, PMTablesSaveFields, ProcessList, translationsAjax). P...

desencannes.com.br XSS vulnerability

Open Bug Bounty ID: OBB-674947 Description| Value ---|--- Affected Website:| desencannes.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

LW-N605R 12.20.2.1486 - Remote Code Execution

Title: LW-N605R 12.20.2.1486 - Remote Code Execution Date: 2018-09-09 Author: Nassim Asrir Vendor: LINK-NET Product Link: http://linknet-usa.com/main/productinfo.php?productsid=35&language=es Firmware version: 12.20.2.1486 CVE: N/A Description: LW-N605R devices allow Remote Code Execution via she...

monogrammedlinenshop.com XSS vulnerability

Open Bug Bounty ID: OBB-674052 Description| Value ---|--- Affected Website:| monogrammedlinenshop.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

splunk.com XSS vulnerability

Open Bug Bounty ID: OBB-673865 Description| Value ---|--- Affected Website:| splunk.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-1000665

Dojo Dojo Objective Harness DOH version prior to version 1.14 contains a Cross Site Scripting XSS vulnerability in unit.html and testsDOH/base/loader/i18n-exhaustive/i18n-test/unit.html and testsDOH/base/i18nExhaustive.js in the DOH that can result in Victim attacked through their browser - deliv...

CVE-2018-1000665

CVE-2018-1000665 affects the Dojo Dojo Objective Harness (DOH) prior to version 1.14. The vulnerability is an XSS in unit.html and related tests (testsDOH/_base/loader/i18n-exhaustive/i18n-test/unit.html and testsDOH/_base/i18nExhaustive.js) that can cause a victim’s browser to execute injected s...

fahrzeuge.asia XSS vulnerability

Open Bug Bounty ID: OBB-673550 Description| Value ---|--- Affected Website:| fahrzeuge.asia Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

inktwereld.be XSS vulnerability

Open Bug Bounty ID: OBB-673509 Description| Value ---|--- Affected Website:| inktwereld.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-15917

CVE-2018-15917 affects Jorani Leave Management System v0.6.5. The issue is a persistent XSS in the language parameter (session/language) that stores user input in the session, enabling an attacker to inject arbitrary script executed by other users (including admins). Evidence across sources confi...

espon.eu XSS vulnerability

Open Bug Bounty ID: OBB-673309 Description| Value ---|--- Affected Website:| espon.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

autoparts-rdc.com XSS vulnerability

Open Bug Bounty ID: OBB-673239 Description| Value ---|--- Affected Website:| autoparts-rdc.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-0672

Movable Type suffers a Cross‑Site Scripting (CWE-79) vulnerability in versions prior to 6.3.1. The NVD/NVD-derived records indicate that remote attackers could inject arbitrary scripts via unspecified vectors, potentially executing in a user’s browser. Affected software: Movable Type (Six Apart) ...

lightmoor.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-672016 Description| Value ---|--- Affected Website:| lightmoor.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress Quizlord 2.0 Cross Site Scripting

Exploit Title: WordPress Plugin Quizlord 2.0 - Cross-Site Scripting Date: 2018-08-29 Exploit Author: Renos Nikolaou Software Link: https://downloads.wordpress.org/plugin/quizlord.zip Version: 2.0 Tested on: Kali Linux CVE: N/A Description : Quizlord is prone to Stored Cross Site Scripting...