Digital Guardian Management Console 7.1.2.0015 Arbitrary File Read

Title: Digital Guardian Managment Console - Arbitrary File Read Vulnerability Author: Pawel Gocyla Date: 18 April 2018 CVE: CVE-2018-10176 Affected software: ================== Digital Guardian Managment Console Version 7.1.2.0015 Description : ============= Digital Guardian is an American data...

guardianglass.com XSS vulnerability

Open Bug Bounty ID: OBB-585771 Description| Value ---|--- Affected Website:| guardianglass.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

See how I in Switzerland's largest hosting providers in the system found a database disclosure vulnerability-vulnerability warning-the black bar safety net

! In the development of our latest security SaaS process, the product allows any user to test their server security level, we on our own site were detected. Since the site is hosted on Switzerland's largest hosting provider of taking into account the relevant legal issues, this article for the ti...

Poor Security at the UK National Health Service

The Guardian is reporting that "every NHS trust assessed for cyber security vulnerabilities has failed to meet the standard required." This is the same NHS that was debilitated by WannaCry. EDITED TO ADD 2/13: More news. And don't think that US hospitals are much better...

blind-guardian-shop.com XSS vulnerability

Open Bug Bounty ID: OBB-367651 Description| Value ---|--- Affected Website:| blind-guardian-shop.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Tor Project Brings Security Slider Feature to Android App Orfox

Tor Project developers recently bolstered Orfox, a Tor Browser for Android devices, to help privacy-conscious mobile browsers better customize their security. Tor Project developers partnered with the Guardian Project to release the first iteration of the app last December. It’s essentially an...

guardian-bank.com XSS vulnerability

Vulnerable URL: http://guardian-bank.com/about-us/" Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 19.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6424772 VIP website status:| No Check guardian-bank.com SSL...

savillsguardian.com.hk XSS vulnerability

Vulnerable URL: http://www.savillsguardian.com.hk/html/en/news-other.asp?actiontype="--!"=0 Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1509849 VIP...

chingfordguardian.co.uk XSS vulnerability

Vulnerable URL: http://www.chingfordguardian.co.uk/search//"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

eppingguardian.co.uk XSS vulnerability

Vulnerable URL: http://www.eppingguardian.co.uk/search//"--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

walthamforestguardian.co.uk XSS vulnerability

Vulnerable URL: http://www.walthamforestguardian.co.uk/search//"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

walthamstowguardian.co.uk XSS vulnerability

Vulnerable URL: http://www.walthamstowguardian.co.uk/search// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

Discourse: Any authenticated user can download full list of users, including email

The ExportCsvController allows users to export different types of entities, if one has guardian access: https://github.com/discourse/discourse/blob/master/app/controllers/exportcsvcontroller.rbL6 However, the guardian check only checks that the entity type is not "admin":...

bramptonguardian.com XSS vulnerability

Vulnerable URL: http://www.bramptonguardian.com/search/allarticles/?q=%3cimg%20src%3dx%20onerror%3dprompt%2fopenbugbounty%2f%3e=brampton-on=datedesc Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 247057 VIP...

Coalition of Cryptographers, Researchers Urge Guardian to Retract WhatsApp Story

A coalition of some of the globe’s top researchers and cryptographers are pleading with The Guardian to retract a story it published last week in which it suggested the encrypted messaging app WhatsApp contained a backdoor. The article, citing research by Tobias Boelter, a cryptography and securi...

Secure Anti Forensic Anonymous Operating System: kodachi

Secure Anti Forensic Anonymous Operating System Linux Kodachi operating system is based on Debian 8.6 it will provide you with a secure, anti forensic, and anonymous operating system considering all features that a person who is concerned about privacy would need to have in order to be secure...

contribute.theguardian.com XSS vulnerability

Vulnerable URL: https://contribute.theguardian.com/eu?INTCMP="%3E%3Csvg onload=alert'OPENBUGBOUNTY'%3E// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

southwalesguardian.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-178206 Description| Value ---|--- Affected Website:| southwalesguardian.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventio...

wandsworthguardian.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-178197 Description| Value ---|--- Affected Website:| wandsworthguardian.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventio...

croydonguardian.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-178202 Description| Value ---|--- Affected Website:| croydonguardian.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...