4172 matches found
www1.maine.gov XSS vulnerability
Vulnerable URL: https://www1.maine.gov/dafs/bablo/licensing/licensesearch.php?telephone=207-282-0202city=SACOdba=1"...
ramiriqui-boyaca.gov.co XSS vulnerability
Open Bug Bounty ID: OBB-259511 Description| Value ---|--- Affected Website:| ramiriqui-boyaca.gov.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
miraflores-boyaca.gov.co XSS vulnerability
Open Bug Bounty ID: OBB-259509 Description| Value ---|--- Affected Website:| miraflores-boyaca.gov.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
collections.ncc.nsw.gov.au XSS vulnerability
Open Bug Bounty ID: OBB-258606 Description| Value ---|--- Affected Website:| collections.ncc.nsw.gov.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
chinavita-boyaca.gov.co XSS vulnerability
Open Bug Bounty ID: OBB-257991 Description| Value ---|--- Affected Website:| chinavita-boyaca.gov.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
huzhu.gov.cn XSS vulnerability
Vulnerable URL: http://www.huzhu.gov.cn/HuaihiReadComplain.asp?ComplainID=1"...
ccgovernment.carr.org XSS vulnerability
Vulnerable URL: http://ccgovernment.carr.org/ccg/ccproc/submit.asp?amount=20=Recs%20and%20parks%20education%20coursesid=RP28412=1"...
dasapps.ohio.gov XSS vulnerability
Vulnerable URL: http://dasapps.ohio.gov/surplus/auto/Inventory.asp?InventNum=1"...
Websites Grabbing User-Form Data Before It's Submitted
Websites are sending information prematurely: ...we discovered NaviStone's code on sites run by Acurian, Quicken Loans, a continuing education center, a clothing store for plus-sized women, and a host of other retailers. Using Javascript, those sites were transmitting information from people as...
June 27, 2017 – Morning Cyber Coffee Headlines – “Helen Keller” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! June 27, 2017 - Headlines 'Petya' ransomware attack strikes companies across...
yanji.gov.cn XSS vulnerability
Vulnerable URL: http://www.yanji.gov.cn/user/index.xhtml?menuid=236==705&cmd1;=content=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 15:12 GMT Vulnerability type:| XSS...
NIST Releases New Digital Identity Guidelines
The National Institute of Standards and Technology NIST has released the Digital Identity Guidelines document suite. The four-volume suite offers technical guidelines for organizations that use digital identity services. US-CERT encourages information security practitioners in industry, governmen...
Shaanxi Weibin District Government Service Center Approval Electronic Monitoring System has multiple loopholes
Shaanxi Weibin District Government Service Center Approval Electronic Monitoring System has multiple vulnerabilities Weak password in the background: also the initial password http://113.201.122.70:8080/Approval/System/Login.aspx...
On GhostHook, Fireball, WannaCry, and more
Mike Mimoso and Chris Brook discuss the news of the week, including Citizen Lab’s latest report, WannaCry hitting Honda, GhostHook, and Fireball. Download: ThreatpostNewsWrapJune232017.mp3 Music by Chris Gonsalves Show notes: GhostHook attack bypasses Windows 10 PatchGuard Say Goodbye to SMBv1 in...
Trump's Cybersecurity Executive Order Under Fire
NEW YORK–President Donald Trump’s Cybersecurity Executive Order needs an overhaul, specifically a shift from planning and proposals to the pragmatic. According to Ed Amoroso, former AT&T CSO, there are dire consequences to the U.S. critical infrastructure if the U.S. government pursues its curren...
Mexican Journalists, Lawyers Focus of Government Spyware
Dozens of Mexican journalists, lawyers, and even a child, had their devices infected with commercially produced spyware during the past two years as part of an overarching campaign believed to be carried out by the nation’s government. The spyware, Pegasus, came in the form of text messages...
karnataka.gov.in XSS vulnerability
Vulnerable URL: http://www.karnataka.gov.in/hfw/kannada/Pages/home.aspx?FollowSite=0=%27-confirm/OPENBUGBOUNTY/-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8100 VIP website...
maine.gov XSS vulnerability
Vulnerable URL: https://www.maine.gov/maineosa/survey/question.php?graphtype=id=groupid=categoryid=%27%22%3E%3Csvg/onload=confirm%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:53 GMT Vulnerability type:| XSS...
