Author: Juan Carlos Garcia

Country: es

Reported research: 44

Advisories

Risk	Topic & Details
Med.	polymail.io PPI Scanner /Insecure -IIS 7.5/Source Code Information Disc. (CVE assigned) Remote Local \| 2018-12-05
Low	AOL File Inclusion / Cross Site ScrIpting Remote Local \| 2018-10-22
Med.	MIT Massachusetts Institute of Technology Parent Directory Information Disclosure Remote \| 2018-10-22
Med.	RINGJORDAN SQL Injection Remote Local \| 2018-10-22
Med.	TESO web 2.0 SQLInjection/ Blind SQLInjection Remote Local \| 2018-10-22
Med.	UNICREDITBANK DOM-Based XSS / File Upload / CSRF Remote \| 2018-10-22
Low	CETELEM ON LINE BANK DOM-Based XSS / Clickjacking: X-Frame-Options header missing / CSRF Remote Local \| 2018-10-22
Low	ProtonMail.ch Header injection/CSRF (CVE assigned) Remote Local \| 2018-10-22
Low	NOAA.gov XSS / CSRF / Clickjacking X-frame / DDOS Remote Local \| 2018-10-22
Med.	ZOHO INFORMATION DISCLOSURE Content type is not specified /INSECURE TRANSITION FROM HTTP TO HTTPS Remote Local \| 2018-10-22
High	TWISTER Peer-To-Peer microblogging Multiples Application Error Message ( and disclosing sensitive information) Remote Local \| 2018-10-22
Med.	PAGELIME CMS jQuery Multiple Vulnerabilities Remote \| 2018-10-09
Med.	DirectAdmin On-Line Demo SQLInjection Remote \| 2018-10-09
Low	VK Social Network Open Redirect- URL Redirector Abuse Remote \| 2018-10-09
Low	Hostinger Web Hosting Multiple Cross Site Scripting Remote Local \| 2018-10-09
Med.	Deep Freeze Software Critical Private Directories Information Dislosure & Persistence XSS Remote \| 2018-10-07
Med.	Facebook HTTP Graph API Users ID (and others..) Information Disclosure ) Remote Local \| 2018-10-06
Med.	Bank of Brasil PPI Scanner/ Cross-Domain JavaScript Source File Inclusion /Source Code Divulgation Remote \| 2018-05-29
Low	Vatican Web Site Cross Site Scripting Remote \| 2013-12-12
High	Kartoo Search Engine XSS / Remote File Inclusion (CVE assigned) Remote \| 2013-11-20
Low	Optomise System Ltd XSS / Information Disclosure Remote \| 2013-11-19
Med.	Admanager Plus Online Demo XSS / CSRF / Clickjacking Remote \| 2013-10-18
Med.	Adaudit Plus Online Demo CSRF / Poor Password Passing Remote \| 2013-10-18
Low	Pagelime CMS XSS / Credential Disclosure Remote \| 2013-10-15
Med.	Opolis.eu Secure Mail Blind SQL Injection / XSS / CSRF / DoS (CVE assigned) Remote \| 2013-10-08
High	S-Mail.com PHP / Apache Issues (CVE assigned) Remote \| 2013-10-08
Med.	Ebuddy Web Messenger Disclosure & CSRF & User Credential Remote \| 2013-09-04
Low	C3t313m Online Bank Cross Site Scripting / Clickjacking Remote \| 2013-09-04
Low	Geonick Social Network Clickjacking / Credential Disclosure Remote \| 2013-08-30
Med.	Obehotel CMS Denial Of Service & SQL Injection (CVE assigned) Remote \| 2013-08-27

Author: Juan Carlos Garcia

Country: es

Reported research: 44

Advisories

Med.

polymail.io PPI Scanner /Insecure -IIS 7.5/Source Code Information Disc. (CVE assigned)

Remote Local | 2018-12-05

Low

Remote Local | 2018-10-22

Med.

Remote | 2018-10-22

Med.

Remote Local | 2018-10-22

Med.

Remote Local | 2018-10-22

Med.

Remote | 2018-10-22

Low

Remote Local | 2018-10-22

Low

ProtonMail.ch Header injection/CSRF (CVE assigned)

Remote Local | 2018-10-22

Low

Remote Local | 2018-10-22

Med.

Remote Local | 2018-10-22

High

Remote Local | 2018-10-22

Med.

Remote | 2018-10-09

Med.

Remote | 2018-10-09

Low

Remote | 2018-10-09

Low

Remote Local | 2018-10-09

Med.

Remote | 2018-10-07

Med.

Remote Local | 2018-10-06

Med.

Remote | 2018-05-29

Low

Remote | 2013-12-12

High

Kartoo Search Engine XSS / Remote File Inclusion (CVE assigned)

Remote | 2013-11-20

Low

Remote | 2013-11-19

Med.

Remote | 2013-10-18

Med.

Remote | 2013-10-18

Low

Remote | 2013-10-15

Med.

Opolis.eu Secure Mail Blind SQL Injection / XSS / CSRF / DoS (CVE assigned)

Remote | 2013-10-08

High

S-Mail.com PHP / Apache Issues (CVE assigned)

Remote | 2013-10-08

Med.

Remote | 2013-09-04

Low

Remote | 2013-09-04

Low

Remote | 2013-08-30

Med.

Obehotel CMS Denial Of Service & SQL Injection (CVE assigned)

Remote | 2013-08-27

Do you know.. we can display your:

- Twitter Link - Website Link - Zone-H Link - Description of profile - email (let us know if you want show public)

Let's us know! submit@cxsec.org

- Twitter Link
- Website Link
- Zone-H Link
- Description of profile
- email (let us know if you want show public)