Hack'em If You Can — U.S. Air Force launches Bug Bounty Program

With the growing number of data breaches and cyber attacks, a significant number of companies and organizations have started Bug Bounty programs for encouraging hackers and bug hunters to find and responsibly report vulnerabilities in their services and get rewarded. Now, following the success of...

U.S. Dept Of Defense: Exposed ███████ Administrative Interface (ColdFusion 11)

Summary: The "/██████████/administrator/" directory is accessible to the public and allows an attacker to further enumerate the system and/or perform brute force attacks. Description: The ████████ website has an exposed "Administrative Interface" for ColdFusion 11, which could be useful to an...

dmch.edu XSS vulnerability

Vulnerable URL: https://www.dmch.edu/facultydepartment.php?categoryid=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1707983 VIP website status:| No Check dmch.edu SSL connection...

Google Pleads for Better Cross-Border Exchange of Digital Evidence

Google said it is receiving a growing number of cross-border requests for user data to be used as evidence in criminal prosecutions. The volume of requests is also exposing weaknesses in the existing process for exchanging data between countries called the Mutual Legal Assistance Treaties MLAT,...

Spammer's Arrest Puts End to Kelihos Botnet

The alleged Russian botmaster behind the Kelihos botnet was arrested while on vacation in Spain, putting an end to a seven-year cybercrime operation that foisted hundreds of millions of spam messages on consumers, as well as a dangerous array of banking malware and ransomware. Pyotr Levashov, als...

U.S. Dept Of Defense: Reflected XSS on a DoD website

A cross-site scripting vulnerability was found on a Department of Defense website which may trick a web user into executing a malicious script, potentially revealing a user's web session information or modify web content. @guifre was able to demonstrate this vulnerability by crafting a specially...

U.S. Dept Of Defense: Reflected XSS in a DoD Website

A cross-site scripting vulnerability was found on a Department of Defense website which may trick a web user into executing a malicious script, potentially revealing a user's web session information or modify web content. @shogunlab was able to demonstrate this vulnerability by crafting a special...

FSB Officers, Criminal Hackers Indicted in Yahoo Breach

The U.S. Department of Justice today indicted four individuals, including two Russian FSB officers, it alleges are connected to a massive breach of Yahoo’s network and the theft of information associated with 500 million accounts. One of the men, Karim Baratov, 22, was arrested March 14 in Canada...

Managing Printer Deployment Using Layers in the Unidesk Environment

While many brokering and persona management solutions provide mechanisms to manage printer deployment, you might find it easier to use Unidesk layers. Unidesk layers provide a flexible mechanism for managing printer deployments for different groups of users. When you use Unidesk layers to deploy...

Patch Tuesday Returns; Microsoft Quiet on Postponement

Patch Tuesday returned today as expected after last month’s postponement with a giant release of fixes that includes patches for vulnerabilities disclosed and exploited since the last set of updates in January. Microsoft, however, was relatively silent on the reasons why the February updates were...

New York State Implements Cybersecurity Regulation 23 NYCRR 500

On March 1st, 2017, sweeping new cybersecurity requirements were placed on organizations regulated by the New York State Department of Financial Services. The law applies to a broad set of covered entities that are supervised by the NYDFS, including banks, trusts, budget planners, check cashers,...

U.S. Dept Of Defense: Remote file inclusion vulnerability on a DoD website

A misconfigured Department of Defense website may have allowed unauthorized users to remotely download local files, potentially revealing sensitive system or user information. @sp1d3rs was able to demonstrate this vulnerability by crafting a specially formatted URL...

U.S. Dept Of Defense: Reflected XSS vulnerability in a DoD website

A cross-site scripting XSS vulnerability was found on a Department of Defense. XSS vulnerabilities can be used to trick a web user into executing a malicious script, potentially revealing a user's web session information or modify web content. @rashedhasan007 able to demonstrate this vulnerabilit...

mediatheque.justice.gouv.fr XSS vulnerability

Vulnerable URL: http://www.mediatheque.justice.gouv.fr/static/player/player.swf?file=/fr/IMG/flv/aef2007-43.flv=promptopenbugbounty Details: Description| Value ---|--- Patched:| Yes, at 24.07.2017 Latest check for patch:| 24.07.2017 20:36 GMT Vulnerability type:| XSS Vulnerability status:| Public...

airservcorp.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://airservcorp.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

cathaybankcareers.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://cathaybankcareers.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

mcd.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://mcd.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

monsterhires.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://monsterhires.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

ohiochristianuniversity.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://ohiochristianuniversity.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

picwic.mua.hrdepartment.com XSS vulnerability

Open Bug Bounty ID: OBB-210818 Description| Value ---|--- Affected Website:| picwic.mua.hrdepartment.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...