API tools faq
paste
int0x76

2014_RD3599-3900_public - 2014.csv

int0x76
Sep 17th, 2015
323
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 35.11 KB | None | 0 0
raw download clone embed print report
  1. RD# Reported (when) Where What Findings Access size records Fixed Time to fix C F U A How Notes
  2. 3599 1/4/2014 Colombia Cross Site Scripting (XSS) Bypassing WAF was not so difficult 01/17/14 13 x display.php?id=1111&table=noticias/"><SCRIPT>alert("0xDUDE");</SCRIPT>
  3. 3600 1/4/2014 New Zealand Vulnerable service: default setting(s) / default credentials Plain text credentials Data leak: > 100 customer/member records 109 01/22/14 18
  4. 3601 1/4/2014 Colombia Cross Site Scripting (XSS) 03/09/14 64 x .jsp?search=" onMouseMove="alert('0xDUDE')
  5. 3602 1/4/2014 Hungary SQL Injection Mysql running as root Data leak: > 1,000 customer/member records 1,452 02/02/14 29 x object_detail.php?d=1[`
  6. 3603 2/8/2014 The Netherlands Information disclosure: Sensitive files Plain text credentials 04/06/14 57 x x
  7. 3604 2/8/2014 Egypt SQL Injection Data leak: Access to confidential data 04/10/14 61 x http://www.[beep].org/programs.php?id=[%27
  8. 3605 2/8/2014 Argentina Command Injection (remote) Data leak: > 1,000,000 customer/member records 1,267,362 02/16/14 8 x
  9. 3606 2/8/2014 India Cross Site Scripting (XSS) 03/15/14 35 x
  10. 3607 2/8/2014 India Cross Site Scripting (XSS) 03/03/14 23 x
  11. 3608 2/8/2014 Canada SQL Injection Data leak: > 1,000,000 customer/member records 4,223,191 03/22/14 42 x http://www.[beep].org/projects.php?id=%27
  12. 3609 2/22/2014 The Netherlands Vulnerable service: mis-configured Data leak: Access to production data 120TB 02/23/14 1 x x Anon FTP access (CRUD) to [redacted] for Dutch TV
  13. 3610 2/22/2014 Central Africa Cross Site Scripting (XSS) 03/08/14 14 x
  14. 3611 2/22/2014 Finland Vulnerable service: default setting(s) / default credentials 03/15/14 21 x
  15. 3612 2/22/2014 Norway Vulnerable service: mis-configured Data leak: > 10,000,000 customer/member records 62,367,483 03/01/14 7 x [redacted].com
  16. 3613 2/22/2014 Colombia Command Injection (remote) Data leak: Access to credentials 04/06/14 43 x
  17. 3614 2/22/2014 Central Africa Cross Site Scripting (XSS) 04/23/14 60 x
  18. 3615 2/22/2014 India Cross Site Scripting (XSS) 04/17/14 54 x
  19. 3616 2/22/2014 The Netherlands Vulnerable service: mis-configured Data leak: Access to confidential data 03/07/14 13 x x ftp://[redacted].on.nl/Public/[redacted]/[redacted]/_Genie%20Timeline%281%29/0/C/
  20. 3617 2/22/2014 Central Africa SQL Injection Data leak: > 100,000 customer/member records 04/14/14 51
  21. 3618 2/22/2014 Venezuela Cross Site Scripting (XSS) 04/13/14 50
  22. 3619 3/1/2014 The Netherlands Vulnerable service: default setting(s) / default credentials Data leak: > 100 customer/member records 283 04/29/14 59 x x admin/admin access to Topdesk
  23. 3620 3/8/2014 Argentina Cross Site Scripting (XSS) 05/04/14 57 x
  24. 3621 3/15/2014 Finland Information disclosure: Sensitive files 03/20/14 5 x x
  25. 3622 3/15/2014 The Netherlands Vulnerable service: mis-configured Data leak: Access to confidential data 2TB 05/21/14 67 x x CRUD on ftp://[redacted].xs4all.nl/
  26. 3623 3/22/2014 South Korea Command Injection (remote) Data leak: > 10,000 customer/member records 25,526 04/10/14 19 x
  27. 3624 3/28/2014 Colombia Cross Site Scripting (XSS) 05/01/14 34 x
  28. 3625 4/2/2014 Central Africa Command Injection (remote) Data leak: > 100 customer/member records 238 04/26/14 24 x
  29. 3626 4/12/2014 Norway Cross Site Scripting (XSS) 05/03/14 21 x
  30. 3627 4/20/2014 The Netherlands Vulnerable service: mis-configured Data leak: Access to confidential data 06/17/14 58 x x CRUD on ftp://[redacted].on.nl/pools/A/A0/[redacted]/Backup%2052/
  31. 3628 4/22/2014 Norway Cross Site Scripting (XSS) 06/11/14 50 x http://www.[redacted].no/
  32. 3629 7/16/2014 Kenya Cross Site Scripting (XSS) 09/18/14 64 x http://[redacted].co.ke/
  33. 3630 8/11/2014 Belgium Vulnerable service: mis-configured Data leak: > 100 customer/member records 635 08/23/14 12 x x CRUD on ftp://[redacted]access.telenet.be/pools/A/A0/Backups/
  34. 3631 8/12/2014 The Netherlands Vulnerable service: default setting(s) / default credentials Data leak: > 1,000 customer/member records 1,729 10/11/14 60 x x CRUD on ftp://[redacted]/pools/A/A0/[redacted]/
  35. 3632 8/13/2014 Hungary SQL Injection Data leak: > 100 customer/member records 133 08/15/14 2 x http://www.[redacted].hu/
  36. 3633 9/11/2014 New Zealand Vulnerable service: not patched with known vulnerabilities Data leak: > 10,000,000 customer/member records 10,483,229 11/10/14 60 x [redacted].com
  37. 3634 10/1/2014 The Netherlands Vulnerable service: not patched with known vulnerabilities Data leak: > 1,000,000 customer/member records 1,203,293 10/06/14 5 x x Vulnerable Tomcat – Dutch [redacted] / [redacted]: authentication and authorization for [redacted] NDA
  38. 3635 10/1/2014 Burma Cross Site Scripting (XSS) 11/03/14 33 x http://[redacted].com/ - Wordpress
  39. 3636 10/1/2014 South Korea Cross Site Scripting (XSS) 10/02/14 1 x http://[redacted].co.kr/
  40. 3637 10/1/2014 India Information disclosure: Open webdirectory Data leak: Access to confidential data 10/18/14 17 x db2.[redacted].co.in/dump
  41. 3638 10/1/2014 Hungary Cross Site Scripting (XSS) 11/22/14 52 x http://[redacted].hu/
  42. 3639 10/1/2014 India Vulnerable service: mis-configured Data leak: > 10,000,000 customer/member records 17,756,436 11/24/14 54 x http://www.[redacted].com/
  43. 3640 10/1/2014 The Netherlands Command Injection (remote) Data leak: Access to confidential data 10/19/14 18 x http://staging.[redacted].nl
  44. 3641 10/1/2014 The Netherlands Information disclosure: Mis-configured service Data leak: Access to confidential data 43TB 10/01/14 Same day x x Company [redacted] leaks all customer data via [redacted].dynamic.ziggo.nl
  45. 3642 10/1/2014 Finland Command Injection (remote) Data leak: > 1,000,000 customer/member records 9,287,768 12/08/14 68 x [redacted] NDA
  46. 3643 10/1/2014 Norway Command Injection (remote) Data leak: Access to financial data 11/16/14 46 x [redacted].no
  47. 3644 10/2/2014 USA Information disclosure: Open webdirectory Data leak: Access to credentials 12/01/14 60 x
  48. 3645 10/2/2014 Finland Cross Site Scripting (XSS) 11/30/14 59 x http://[redacted].fi/
  49. 3647 10/2/2014 Norway Vulnerable service: not patched with known vulnerabilities Data leak: > 10,000 customer/member records 93,783 10/28/14 26 x [redcated].no
  50. 3648 10/2/2014 New Zealand Vulnerable service: default setting(s) / default credentials Data leak: Access to financial data 10/28/14 26 x
  51. 3649 10/2/2014 New Zealand Information disclosure: readable configs 11/07/14 36 x
  52. 3650 10/2/2014 USA Information disclosure: Open webdirectory Data leak: Access to credentials 11/04/14 33 x
  53. 3652 10/2/2014 Argentina Vulnerable service: not patched with known vulnerabilities Data leak: > 10,000 customer/member records 776,087 11/09/14 38 x [redacted]
  54. 3653 10/2/2014 USA Vulnerable service: not patched with known vulnerabilities Data leak: > 10,000,000 customer/member records 29,346,779 10/23/14 21 x [redacted]
  55. 3654 10/2/2014 Hungary Information disclosure: readable configs Data leak: Access to credentials 10/27/14 25 x
  56. 3655 10/2/2014 Argentina Information disclosure: Sensitive files 11/28/14 57 x
  57. 3656 10/3/2014 India Cross Site Scripting (XSS) 11/29/14 57 x
  58. 3657 10/3/2014 India SQL Injection Data leak: > 100,000 customer/member records 356,723 10/30/14 27 x x http://www.[redacted].co.id/category.php?main=[%27
  59. 3658 10/3/2014 The Netherlands Command Injection (remote) Data leak: > 1,000 customer/member records 1,200 10/22/14 19 x x
  60. 3659 10/3/2014 USA Command Injection (remote) Data leak: > 100,000 customer/member records 553,429 11/27/14 55 x
  61. 3660 10/3/2014 Argentina Vulnerable service: mis-configured Data leak: Access to credentials 12/05/14 63 x
  62. 3661 10/3/2014 New Zealand Information disclosure: readable configs Data leak: Access to credentials 12/09/14 67 x
  63. 3662 10/3/2014 Belgium Cross Site Scripting (XSS) 11/30/14 58 x
  64. 3663 10/3/2014 Colombia SQL Injection Data leak: Access to confidential data 10/31/14 28 x
  65. 3664 10/3/2014 The Netherlands Command Injection (remote) Data leak: > 10,000,000 customer/member records 35,260,757 11/15/14 43 x x NDA
  66. 3665 10/3/2014 Colombia SQL Injection Data leak: > 10,000 customer/member records 71,133 10/18/14 15 x
  67. 3666 10/3/2014 Central Africa Vulnerable service: mis-configured Data leak: Access to confidential data 10/18/14 15 x
  68. 3667 10/3/2014 The Netherlands Cross Site Scripting (XSS) 11/22/14 50 x x
  69. 3668 10/3/2014 Central Africa Vulnerable service: not patched with known vulnerabilities Data leak: > 1,000,000 customer/member records 5,273,882 10/16/14 13 x
  70. 3669 10/3/2014 The Netherlands Cross Site Scripting (XSS) 10/19/14 16 x x
  71. 3670 10/3/2014 USA Cross Site Scripting (XSS) 12/10/14 68 x
  72. 3671 10/3/2014 Finland Vulnerable service: no authorization required Data leak: Access to confidential data 10/22/14 19 x
  73. 3672 10/3/2014 Central Africa Information disclosure: Open webdirectory Data leak: Access to credentials 12/08/14 66 x
  74. 3673 10/3/2014 Argentina Vulnerable service: not patched with known vulnerabilities Data leak: > 1,000,000 customer/member records 312,731 12/07/14 65 x
  75. 3674 10/3/2014 Sweden Vulnerable service: not patched with known vulnerabilities Data leak: > 10,000,000 customer/member records 7,984,414 10/17/14 14 x x
  76. 3675 10/3/2014 South Korea Vulnerable service: not patched with known vulnerabilities Data leak: Access to credentials 11/23/14 51 x
  77. 3676 10/3/2014 The Netherlands Information disclosure: readable configs Data leak: Access to credentials 11/07/14 35 x
  78. 3677 10/3/2014 The Netherlands Cross Site Scripting (XSS) 10/21/14 18 x x
  79. 3678 10/4/2014 Norway Information disclosure: Sensitive files 10/18/14 14 x
  80. 3679 10/4/2014 The Netherlands Information disclosure: Open webdirectory Data leak: Access to credentials 11/11/14 38 x
  81. 3680 10/4/2014 Central Africa Vulnerable service: not patched with known vulnerabilities Data leak: Access to confidential data 11/16/14 43 x
  82. 3681 10/4/2014 Finland Cross Site Scripting (XSS) 10/20/14 16 x
  83. 3682 10/4/2014 Venezuela Information disclosure: Mis-configured service Data leak: Access to confidential data 12/02/14 59 x
  84. 3683 10/4/2014 India Cross Site Scripting (XSS) 11/14/14 41 x
  85. 3684 10/4/2014 Colombia Cross Site Scripting (XSS) 11/24/14 51 x
  86. 3685 10/4/2014 Central Africa Cross Site Scripting (XSS) 11/17/14 44 x
  87. 3686 10/4/2014 USA Command Injection (remote) Data leak: Access to credentials 10/30/14 26 x
  88. 3687 10/4/2014 India Cross Site Scripting (XSS) 11/27/14 54 x
  89. 3688 10/4/2014 USA Vulnerable service: mis-configured Data leak: Access to confidential data 10/05/14 1 x x Co-founder of [redacted] and [redacted] accidentally leaked confidential files from his NAS Contact via LinkedIn
  90. 3689 10/4/2014 Hungary Cross Site Scripting (XSS) 11/30/14 57 x
  91. 3690 10/4/2014 South Korea Information disclosure: Open webdirectory Data leak: Access to confidential data 11/28/14 55 x
  92. 3691 10/4/2014 The Netherlands Vulnerable service: not patched with known vulnerabilities Data leak: > 10,000 customer/member records 61,437 10/09/14 5 x x
  93. 3692 10/4/2014 Turkey Cross Site Scripting (XSS) 10/10/14 6 x
  94. 3693 10/4/2014 Andorra SQL Injection Data leak: > 100 customer/member records 121 11/13/14 40 x
  95. 3694 10/4/2014 Vatican City SQL Injection Data leak: > 1,000 customer/member records 1,843 11/19/14 46 x
  96. 3695 10/4/2014 USA Vulnerable service: not patched with known vulnerabilities Data leak: Access to financial data 11/13/14 40 x
  97. 3696 10/4/2014 Luxemburg Cross Site Scripting (XSS) 10/26/14 22 x
  98. 3697 10/4/2014 Poland Command Injection (remote) Data leak: > 10,000,000 customer/member records 41,829,850 10/20/14 16 x x NDA
  99. 3698 10/4/2014 Italy Vulnerable service: mis-configured Data leak: > 100 customer/member records 445 10/21/14 17 x
  100. 3699 10/4/2014 New Zealand Vulnerable service: default setting(s) / default credentials Data leak: > 100 customer/member records 239 11/10/14 37 x
  101. 3700 10/4/2014 Sint Maarten Cross Site Scripting (XSS) 11/19/14 46 x
  102. 3701 10/4/2014 Central Africa SQL Injection Data leak: > 10,000 customer/member records 94,665 11/26/14 53 x
  103. 3702 10/4/2014 India Cross Site Scripting (XSS) 10/20/14 16 x
  104. 3703 10/4/2014 Austria Vulnerable service: not patched with known vulnerabilities Data leak: > 1,000,000 customer/member records 2,079,278 11/25/14 52 x x NDA
  105. 3704 10/4/2014 Liechtenstein Cross Site Scripting (XSS) 11/17/14 44 x [redacted]
  106. 3705 10/4/2014 Armenia Cross Site Scripting (XSS) 11/16/14 43 x
  107. 3706 10/4/2014 Argentina Vulnerable service: not patched with known vulnerabilities Data leak: > 10,000 customer/member records 92,296 11/15/14 42 x
  108. 3707 10/4/2014 New Zealand Vulnerable service: mis-configured Data leak: > 10,000,000 customer/member records 74,767,317 10/15/14 11 x Db dumps found on certsrv.[redacted].nz backup storage – Reported via Bug bounty program but dismissed for being out of scope.
  109. 3708 10/4/2014 USA Command Injection (remote) Data leak: > 1,000 customer/member records 2,893 11/03/14 30 x
  110. 3709 10/4/2014 The Netherlands Cross Site Scripting (XSS) 11/16/14 43 x
  111. 3710 10/4/2014 India Command Injection (remote) Data leak: Access to credentials 11/23/14 50 x
  112. 3711 10/4/2014 USA SQL Injection Data leak: Access to confidential data 11/16/14 43 x
  113. 3712 10/4/2014 Central Africa Cross-Site Request Forgery (CSRF) 12/05/14 62 x
  114. 3713 10/4/2014 Central Africa Cross Site Scripting (XSS) 11/04/14 31 x
  115. 3714 10/4/2014 The Netherlands Cross Site Scripting (XSS) 10/11/14 7 x
  116. 3715 10/4/2014 Venezuela Cross Site Scripting (XSS) 12/02/14 59 x
  117. 3716 10/4/2014 The Netherlands SQL Injection Data leak: Access to credentials 10/09/14 5 x
  118. 3717 10/4/2014 Denmark Vulnerable service: mis-configured Data leak: > 10,000 customer/member records 15,965 10/05/14 1 x x CEO leaks customer files via ftp://87-104-65-85-dynamic-customer.profibernet.dk
  119. 3718 10/5/2014 The Netherlands Command Injection (remote) Data leak: > 1,000 customer/member records 9,654 10/06/14 1 x x
  120. 3719 10/5/2014 The Netherlands Information disclosure: Open webdirectory 10/19/14 14 x
  121. 3720 10/5/2014 The Netherlands Physical: SCADA via Wifi 11/05/14 31 x [redacted] / [redacted] home router with WPS enabled and access to a VxWorks console
  122. 3721 10/5/2014 Portugal SQL Injection Data leak: > 10,000,000 customer/member records 12/10/14 66 x
  123. 3722 10/5/2014 Finland Cross Site Scripting (XSS) 10/06/14 1 x x
  124. 3723 10/5/2014 Ireland Vulnerable service: default setting(s) / default credentials Data leak: > 10,000,000 customer/member records 10,699,106 10/06/14 1 x x [redacted].IE
  125. 3724 10/5/2014 New Zealand Vulnerable service: mis-configured Data leak: Access to confidential data 11/28/14 54 x
  126. 3725 10/5/2014 Venezuela Cross Site Scripting (XSS) 12/09/14 65 x
  127. 3726 10/5/2014 Canada Cross Site Scripting (XSS) 10/25/14 20 x
  128. 3727 10/5/2014 Bulgaria SQL Injection Data leak: > 100,000 customer/member records 256,374 10/26/14 21 x
  129. 3728 10/5/2014 Romania Cross Site Scripting (XSS) 11/14/14 40 x
  130. 3729 10/5/2014 Central Africa Command Injection (remote) Data leak: > 10,000,000 customer/member records 19,077,445 11/13/14 39 x
  131. 3730 10/5/2014 Greece SQL Injection Data leak: > 10,000,000 customer/member records 11,074,021 10/15/14 10 x x
  132. 3731 10/5/2014 India Cross Site Scripting (XSS) 11/01/14 27 x
  133. 3732 10/5/2014 Czech Republic Cross Site Scripting (XSS) 11/02/14 28
  134. 3733 10/6/2014 Czech Republic Vulnerable service: mis-configured Data leak: > 100 customer/member records 10/15/14 9 x
  135. 3734 10/6/2014 Czech Republic SQL Injection Data leak: > 10,000 customer/member records 59,791 10/09/14 3 x
  136. 3735 10/8/2014 Czech Republic Information disclosure: Sensitive files 11/16/14 39 x
  137. 3736 10/8/2014 Czech Republic Command Injection (remote) Data leak: > 100,000 customer/member records 322,109 10/21/14 13 x
  138. 3737 10/8/2014 Czech Republic Command Injection (remote) Data leak: > 1,000,000 customer/member records 3,843,202 11/28/14 51 x
  139. 3738 10/10/2014 Argentina Cross Site Scripting (XSS) 12/12/14 63 x
  140. 3739 10/10/2014 Finland Information disclosure: Open webdirectory Data leak: Access to financial data 11/02/14 23 x
  141. 3740 10/10/2014 The Netherlands Cross Site Scripting (XSS) 10/12/14 2 x
  142. 3741 10/10/2014 Lithuania Information disclosure: Sensitive files Data leak: Access to credentials 12/08/14 59 x
  143. 3742 10/10/2014 Lithuania Cross Site Scripting (XSS) 10/26/14 16 x
  144. 3743 10/10/2014 Lithuania Vulnerable service: mis-configured Data leak: Access to financial data 10/24/14 14 x
  145. 3744 10/10/2014 Lithuania Command Injection (remote) Data leak: Access to confidential data 12/02/14 53 x
  146. 3745 10/10/2014 USA Vulnerable service: not patched with known vulnerabilities Data leak: > 10,000 customer/member records 65,683 10/15/14 5 x x
  147. 3746 10/10/2014 The Netherlands Information disclosure: readable configs 10/11/14 1 x
  148. 3747 10/10/2014 Venezuela Vulnerable service: mis-configured Data leak: > 100,000 customer/member records 75,223 11/18/14 39 x
  149. 3748 10/10/2014 USA SQL Injection Data leak: > 1,000 customer/member records 52,128 11/03/14 24 x
  150. 3749 10/10/2014 The Netherlands Command Injection (remote) Data leak: Access to financial data 11/16/14 37 x
  151. 3750 10/10/2014 The Netherlands Information disclosure: Open webdirectory Data leak: Access to credentials 10/27/14 17 x
  152. 3751 10/10/2014 Jamaica Cross Site Scripting (XSS) 12/05/14 56 x
  153. 3752 10/10/2014 Argentina Vulnerable service: default setting(s) / default credentials Data leak: Access to credentials 10/11/14 1 x x
  154. 3753 10/10/2014 Lebanon Cross Site Scripting (XSS) 11/08/14 29 x
  155. 3754 10/10/2014 The Netherlands Cross Site Scripting (XSS) 11/11/14 32 x
  156. 3755 10/10/2014 The Netherlands Command Injection (remote) Data leak: Access to confidential data 12/01/14 52 x
  157. 3756 10/10/2014 The Netherlands Cross Site Scripting (XSS) 12/17/14 68 x
  158. 3757 10/10/2014 The Netherlands Information disclosure: readable configs Data leak: Access to credentials 10/31/14 21 x
  159. 3758 10/10/2014 Mexico Vulnerable service: not patched with known vulnerabilities Data leak: Access to confidential data 12/07/14 58 x
  160. 3759 10/10/2014 Mexico Vulnerable service: mis-configured Data leak: Access to confidential data 10/24/14 14 x
  161. 3760 10/10/2014 Mexico Cross Site Scripting (XSS) 11/24/14 45 x
  162. 3761 10/10/2014 Mexico Command Injection (remote) Data leak: > 1,000 customer/member records 8,903 10/16/14 6 x
  163. 3762 10/10/2014 Mexico Cross Site Scripting (XSS) 12/17/14 68 x
  164. 3763 10/11/2014 Nepal Vulnerable service: default setting(s) / default credentials Data leak: Access to confidential data 11/22/14 42 x [redacted] leaking medical files
  165. 3764 10/11/2014 Monaco Cross Site Scripting (XSS) 12/17/14 67 x
  166. 3765 10/11/2014 Monaco SQL Injection Data leak: Access to financial data 11/15/14 35 x
  167. 3766 10/11/2014 Monaco Command Injection (remote) Data leak: > 10,000 customer/member records 55,609 10/12/14 1 x x
  168. 3767 10/11/2014 Monaco SQL Injection Data leak: Access to financial data 10/27/14 16 x
  169. 3768 10/11/2014 Monaco Vulnerable service: default setting(s) / default credentials Data leak: > 100,000 customer/member records 356,322 12/09/14 59 x
  170. 3769 10/11/2014 Monaco Vulnerable service: not patched with known vulnerabilities Data leak: Access to credentials 10/26/14 15 x
  171. 3770 10/11/2014 Monaco Information disclosure: readable configs Data leak: Access to credentials 11/14/14 34 x
  172. 3771 10/11/2014 Monaco Information disclosure: readable configs Data leak: Access to credentials 10/20/14 9 x
  173. 3772 10/11/2014 Monaco Vulnerable service: not patched with known vulnerabilities Data leak: Access to credentials 10/19/14 8 x
  174. 3773 10/11/2014 Monaco Information disclosure: Sensitive files 11/16/14 36 x
  175. 3774 10/11/2014 Monaco Vulnerable service: mis-configured Data leak: Access to credentials 12/05/14 55 x
  176. 3775 10/11/2014 Monaco Vulnerable service: no authorization required VNC control panel 12/02/14 52 x
  177. 3776 10/11/2014 Monaco Command Injection (remote) Data leak: Access to credentials 11/28/14 48 x
  178. 3777 10/11/2014 Monaco Cross Site Scripting (XSS) 10/13/14 2 x
  179. 3778 10/11/2014 Monaco SQL Injection Data leak: > 100,000 customer/member records 221,289 10/15/14 4 x
  180. 3779 10/11/2014 Monaco SQL Injection Data leak: > 1,000,000 customer/member records 332,272 12/04/14 54 x
  181. 3780 10/11/2014 Monaco Vulnerable service: mis-configured 10/26/14 15 x
  182. 3781 10/11/2014 Monaco Vulnerable service: not patched with known vulnerabilities Data leak: > 10,000 customer/member records 26,716 12/18/14 68 x
  183. 3782 10/11/2014 Monaco Information disclosure: Open webdirectory 10/28/14 17 x
  184. 3783 10/11/2014 Monaco Vulnerable service: not patched with known vulnerabilities Data leak: > 100 customer/member records 433 10/31/14 20 x
  185. 3784 10/11/2014 Monaco SQL Injection Data leak: > 10,000 customer/member records 40,527 10/28/14 17 x
  186. 3785 10/11/2014 Monaco Cross Site Scripting (XSS) 11/29/14 49 x
  187. 3786 10/11/2014 Monaco Vulnerable service: mis-configured Data leak: > 100 customer/member records 122 11/10/14 30 x
  188. 3787 10/11/2014 Monaco Cross Site Scripting (XSS) 12/08/14 58 x
  189. 3788 10/11/2014 Monaco Cross-Site Request Forgery (CSRF) 10/23/14 12 x
  190. 3789 10/12/2014 The Netherlands Cross Site Scripting (XSS) 10/13/14 1 x x
  191. 3790 10/12/2014 Morocco Information disclosure: Open webdirectory Data leak: Access to confidential data 10/27/14 15 x
  192. 3791 10/12/2014 Morocco Vulnerable service: mis-configured Data leak: > 10,000,000 customer/member records 16,897,500 11/20/14 39 x
  193. 3792 10/12/2014 Morocco SQL Injection Data leak: > 100 customer/member records 221 12/04/14 53 x
  194. 3793 10/12/2014 Morocco Information disclosure: Open webdirectory Data leak: > 1,000 customer/member records 1,293 10/14/14 2 x x
  195. 3794 10/12/2014 Morocco SQL Injection Data leak: Access to confidential data 10/20/14 8 x
  196. 3795 10/12/2014 Morocco Information disclosure: readable configs Data leak: Access to credentials 11/15/14 34 x
  197. 3796 10/12/2014 Suriname Cross Site Scripting (XSS) 10/28/14 16 x
  198. 3797 10/12/2014 Suriname Cross Site Scripting (XSS) 11/27/14 46 x
  199. 3798 10/12/2014 The Netherlands Cross Site Scripting (XSS) 10/15/14 3 x
  200. 3799 10/12/2014 USA Cross Site Scripting (XSS) 10/23/14 11 x
  201. 3800 10/15/2014 India Vulnerable service: mis-configured Data leak: Access to credentials 11/13/14 29 x
  202. 3801 10/15/2014 India Cross Site Scripting (XSS) 12/12/14 58 x
  203. 3802 10/15/2014 The Netherlands Vulnerable service: mis-configured Data leak: > 10,000 customer/member records 21,804 12/16/14 62 x
  204. 3803 10/15/2014 Tunisia Command Injection (remote) Data leak: > 1,000,000 customer/member records 1,016,912 12/07/14 53
  205. 3804 10/16/2014 Côte d'Ivoire Command Injection (remote) Data leak: > 10,000 customer/member records 26,528 10/19/14 3 [redacted]
  206. 3805 10/16/2014 Côte d'Ivoire Vulnerable service: mis-configured Data leak: > 10,000,000 customer/member records 39,788,737 10/17/14 1 x x [redacted]
  207. 3806 10/16/2014 Indonesia Cross Site Scripting (XSS) 12/18/14 63 x
  208. 3807 10/17/2014 Iraq Cross Site Scripting (XSS) 12/23/14 67 x
  209. 3808 10/17/2014 Benin Vulnerable service: not patched with known vulnerabilities Data leak: > 100,000 customer/member records 15,315 10/19/14 2 x x [redacted] system available via beep.[redacted].com
  210. 3809 10/17/2014 Peru Cross Site Scripting (XSS) 12/08/14 52 x
  211. 3810 10/17/2014 The Netherlands Vulnerable service: not patched with known vulnerabilities Data leak: Access to credentials 10/21/14 4 x
  212. 3811 10/17/2014 Belize Cross Site Scripting (XSS) 11/12/14 26 x [redacted]
  213. 3812 10/17/2014 South Korea Vulnerable service: not patched with known vulnerabilities Data leak: > 1,000,000 customer/member records 2,127,882 10/29/14 12 x
  214. 3813 10/17/2014 The Netherlands Vulnerable service: mis-configured Data leak: Access to confidential data 10/19/14 2 x
  215. 3814 10/17/2014 Brunei Vulnerable service: mis-configured Data leak: > 100 customer/member records 304 12/10/14 54 x [redacted]
  216. 3815 10/17/2014 Malaysia Vulnerable service: mis-configured Data leak: > 1,000 customer/member records 1,129 12/12/14 56 x [redacted].com.my
  217. 3816 10/17/2014 Panama SQL Injection Data leak: > 10,000,000 customer/member records 14,669,601 12/19/14 63 x [redacted] is leaking patient, employers, contractor data
  218. 3817 10/17/2014 USA SQL Injection Data leak: > 100,000 customer/member records 61,763 10/28/14 11 x
  219. 3818 10/17/2014 The Netherlands Cross Site Scripting (XSS) 10/21/14 4 x
  220. 3819 10/17/2014 The Netherlands Vulnerable service: not patched with known vulnerabilities Data leak: > 1,000 customer/member records 1,120 10/22/14 5 x
  221. 3820 10/17/2014 The Netherlands Cross Site Scripting (XSS) 12/19/14 63 x
  222. 3821 10/17/2014 Andorra Command Injection (remote) Data leak: Access to financial data 12/06/14 50 x
  223. 3822 10/17/2014 Ecuador Cross Site Scripting (XSS) 12/08/14 52 x [redacted]
  224. 3823 10/17/2014 Belgium Cross Site Scripting (XSS) 10/30/14 13 x
  225. 3824 10/17/2014 The Netherlands Vulnerable service: mis-configured Data leak: > 10,000 customer/member records 26,361 10/24/14 7 x
  226. 3825 10/18/2014 The Netherlands Command Injection (remote) Data leak: > 10,000 customer/member records 45,002 10/26/14 8 x
  227. 3826 10/19/2014 Chile Cross Site Scripting (XSS) 12/10/14 52 x
  228. 3827 10/19/2014 Chile Information disclosure: Open webdirectory Data leak: > 1,000 customer/member records 33,263 12/01/14 43 x
  229. 3828 10/19/2014 Chile Information disclosure: Mis-configured service Data leak: Access to credentials 12/11/14 53 x
  230. 3829 10/19/2014 Chile Cross Site Scripting (XSS) 11/28/14 40 x
  231. 3830 10/19/2014 Chile Vulnerable service: no authorization required Data leak: > 10,000,000 customer/member records 21,152,015 11/06/14 18 x [redacted].cl online [redacted] staging server is leaking customer data via 5 OpenMongoDB's
  232. 3831 10/19/2014 Chile Cross Site Scripting (XSS) 10/28/14 9 x
  233. 3832 10/19/2014 Chile Cross Site Scripting (XSS) 12/05/14 47 x
  234. 3833 10/19/2014 Chile Information disclosure: readable configs Data leak: Access to credentials 10/25/14 6 x
  235. 3834 10/19/2014 Chile SQL Injection Data leak: > 10,000,000 customer/member records 19,945,908 11/03/14 15 x [redacted] leaking customer data
  236. 3835 10/19/2014 Chile Vulnerable service: not patched with known vulnerabilities Data leak: > 100,000 customer/member records 332,897 12/18/14 60 x [redacted] leaking customer data
  237. 3836 10/19/2014 Chile Vulnerable service: mis-configured Data leak: > 1,000 customer/member records 1,185 12/06/14 48 x [redacted] HRM data
  238. 3837 10/19/2014 Chile SQL Injection Data leak: > 10,000 customer/member records 84,095 10/24/14 5 x [redacted] HRM data
  239. 3838 10/19/2014 Chile Cross Site Scripting (XSS) 12/05/14 47 x [redacted]
  240. 3839 10/19/2014 Chile Information disclosure: Sensitive files Data leak: Access to confidential data 11/02/14 14 x [redacted]
  241. 3840 10/20/2014 The Netherlands Cross Site Scripting (XSS) 10/21/14 1 x
  242. 3841 11/1/2014 Uruguay Vulnerable service: not patched with known vulnerabilities Data leak: Access to confidential data 12/25/14 54 x
  243. 3842 11/1/2014 Uruguay Cross Site Scripting (XSS) 12/30/14 59 x
  244. 3843 11/1/2014 Uruguay Command Injection (remote) Data leak: > 10,000 customer/member records 47,854 11/15/14 14 x
  245. 3844 11/1/2014 Uruguay Vulnerable service: default setting(s) / default credentials Data leak: > 10,000 customer/member records 21,716 12/17/14 46 x
  246. 3845 11/1/2014 Uruguay Cross Site Scripting (XSS) 12/24/14 53 x
  247. 3846 11/1/2014 Uruguay SQL Injection Data leak: > 100 customer/member records 105 12/21/14 50 x
  248. 3847 11/1/2014 Uruguay Cross Site Scripting (XSS) 11/02/14 1 x x
  249. 3848 11/1/2014 Uruguay Information disclosure: Open webdirectory Data leak: Access to confidential data 12/23/14 52 x
  250. 3849 11/1/2014 Uruguay Vulnerable service: mis-configured Data leak: Access to credentials 11/25/14 24 x
  251. 3850 11/1/2014 Uruguay SQL Injection Data leak: Access to confidential data 12/31/14 60 x
  252. 3851 11/1/2014 Uruguay Information disclosure: Sensitive files Data leak: Access to confidential data 12/18/14 47 x
  253. 3852 11/1/2014 Uruguay Vulnerable service: default setting(s) / default credentials Data leak: Access to credentials 11/12/14 11 x
  254. 3853 11/1/2014 Uruguay Command Injection (remote) Data leak: > 1,000 customer/member records 1,322 12/12/14 41 x
  255. 3854 11/1/2014 Uruguay Vulnerable service: not patched with known vulnerabilities Data leak: Access to confidential data 11/22/14 21 x
  256. 3855 11/1/2014 Uruguay Cross Site Scripting (XSS) 11/04/14 3 x
  257. 3856 11/1/2014 Uruguay Cross Site Scripting (XSS) 12/09/14 38 x
  258. 3857 11/2/2014 Colombia Vulnerable service: mis-configured Data leak: > 1,000 customer/member records 5,906 11/09/14 7 x
  259. 3858 11/2/2014 USA SQL Injection Data leak: Access to confidential data 12/14/14 42 x
  260. 3859 11/2/2014 USA Vulnerable service: mis-configured Data leak: > 1,000,000 customer/member records 2,132,789 11/07/14 5 x
  261. 3860 11/2/2014 USA Vulnerable service: not patched with known vulnerabilities Data leak: > 10,000,000 customer/member records 15,009,484 12/21/14 49 x
  262. 3861 11/2/2014 USA Vulnerable service: mis-configured Data leak: > 1,000 customer/member records 4,839 11/17/14 15 x
  263. 3862 11/2/2014 USA Cross Site Scripting (XSS) 11/15/14 13 x
  264. 3863 11/2/2014 USA Cross Site Scripting (XSS) 11/18/14 16 x
  265. 3864 11/2/2014 USA Cross Site Scripting (XSS) 11/16/14 14 x
  266. 3865 11/2/2014 USA Vulnerable service: not patched with known vulnerabilities Data leak: Access to credentials 11/18/14 16 x
  267. 3866 11/2/2014 USA Cross Site Scripting (XSS) 12/11/14 39 x
  268. 3867 11/14/2014 Mauritius Vulnerable service: no authorization required VNC: control panel 11/25/14 11 x [redacted]: Oilpump controller
  269. 3868 11/14/2014 Belize Vulnerable service: default setting(s) / default credentials Data leak: Access to confidential data 11/21/14 7 x
  270. 3869 11/14/2014 Equatorial Guinea Cross Site Scripting (XSS) 11/20/14 6 x http://[redacted].com/
  271. 3870 11/14/2014 France Vulnerable service: no authorization required Data leak: > 10,000,000 customer/member records 12,709,314 12/15/14 31 x [redacted]: Production backup, designs, HRM, Finance, etc
  272. 3871 11/14/2014 Tanzania Vulnerable service: mis-configured Data leak: Access to credentials 11/21/14 7 x [redacted]
  273. 3872 11/14/2014 Iran Information disclosure: readable configs Data leak: Access to credentials 12/07/14 23 x [redacted]
  274. 3873 11/14/2014 Guyana Cross Site Scripting (XSS) 12/06/14 22 x http://www.[redacted].com
  275. 3874 11/15/2014 Rwanda Information disclosure: Sensitive files Data leak: Access to credentials 11/19/14 4 x http://www.[redacted].com
  276. 3875 11/15/2014 Cambodia SQL Injection Data leak: Access to credentials 01/07/15 53 x http://www.[redacted].com – Wordpres 3.2
  277. 3876 11/15/2014 Peru Cross Site Scripting (XSS) 12/06/14 21 x http://[redacted].com.pe/
  278. 3877 11/15/2014 Ghana Information disclosure: readable configs Data leak: Access to credentials 11/29/14 14 x www.[redacted].com.gh
  279. 3878 11/15/2014 Sierra Leone Information disclosure: Mis-configured service Data leak: > 100,000 customer/member records 165,153 01/03/15 49 x http://www.[redacted].com Leaks customer data via an OpenMongo database
  280. 3879 11/15/2014 Burundi SQL Injection Data leak: > 1,000 customer/member records 5,666 12/19/14 34 x http://[redacted].com
  281. 3880 11/17/2014 Estonia SQL Injection Data leak: > 1,000 customer/member records 1,185 11/18/14 1 x x [redacted] CMS shares the same database with the CRM of http://[redacted].ee
  282. 3881 11/17/2014 Bulgaria SQL Injection Data leak: > 10,000,000 customer/member records 13,913,326 12/11/14 24 x http://www.[redacted].bg - Alll customers are accessible via a vulnerable CMS.
  283. 3882 11/20/2014 United Kingdom Cross Site Scripting (XSS) 12/18/14 28 x
  284. 3883 11/28/2014 Malaysia SQL Injection Data leak: > 100 customer/member records 522 12/14/14 16 x
  285. 3884 11/28/2014 Monaco Command Injection (remote) Data leak: > 1,000 customer/member records 3,272 12/12/14 14 x
  286. 3885 11/28/2014 Switzerland Information disclosure: Sensitive files Data leak: Access to confidential data 12/25/14 27 x
  287. 3886 11/29/2014 Ireland Vulnerable service: not patched with known vulnerabilities Data leak: Access to confidential data 12/24/14 25 x
  288. 3887 11/29/2014 Oman Vulnerable service: not patched with known vulnerabilities Data leak: Access to confidential data 12/19/14 20 x [redacted].com
  289. 3888 11/29/2014 Haiti Vulnerable service: mis-configured Data leak: > 1,000 customer/member records 1,726 12/20/14 21 x storage.[redacted].ht
  290. 3889 11/29/2014 Dominica Cross Site Scripting (XSS) 12/31/14 32 x http://www.[redacted].com
  291. 3890 11/29/2014 Cyprus Cross Site Scripting (XSS) 12/19/14 20 x http://www.[redacted].org.cy
  292. 3891 12/1/2014 Tajikistan Cross Site Scripting (XSS) 12/14/14 13 x http://www.[redacted].com.tj
  293. 3892 12/2/2014 Maldives Vulnerable service: not patched with known vulnerabilities Data leak: > 1,000 customer/member records 1,542 12/11/14 9 x www.[redacted].edu.mv
  294. 3893 12/3/2014 The Netherlands SQL Injection Data leak: > 1,000 customer/member records 3,315 12/15/14 12 x
  295. 3894 12/3/2014 The Netherlands Cross Site Scripting (XSS) 12/31/14 28 x
  296. 3895 12/3/2014 The Netherlands Cross Site Scripting (XSS) 12/19/14 16 x
  297. 3896 12/3/2014 The Netherlands Vulnerable service: not patched with known vulnerabilities Data leak: Access to credentials 12/24/14 21 x
  298. 3897 12/3/2014 The Netherlands Information disclosure: Mis-configured service Open FTP (anon) – CRUD Data leak: Access to confidential data 12/04/14 1 x x [redacted] contractor leaks (via employee open NAS) technical drawings/specs of the entrance gate security of [redacted]'s data-center
  299. 3898 12/3/2014 The Netherlands Vulnerable service: mis-configured Data leak: Access to confidential data 12/06/14 3 x
  300. 3899 12/3/2014 The Netherlands Cross Site Scripting (XSS) 12/07/14 4 x
  301. 3900 12/14/2014 Montenegro Vulnerable service: no authorization required Data leak: Access to confidential data 12/15/14 1 x x
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!