Hyatt Hotels: Hyatt WeChat Secret, Baidu AK Secret, and mysql db credentials inadvertantly made publicly available

This one is slightly odd, so I've rated it a low, as I'm not able to confirm whether or not these are active creds/secrets it's late and I don't speak/read Chinese. During recon for hyatt.com, I stumbled across this github.com repo that seems to be for hyatt's wechat setup:...

hotels-ua.info XSS vulnerability

Open Bug Bounty ID: OBB-718903 Description| Value ---|--- Affected Website:| hotels-ua.info Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

hotels-ua.info XSS vulnerability

Open Bug Bounty ID: OBB-717863 Description| Value ---|--- Affected Website:| hotels-ua.info Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

2018: A Banner Year for Breaches

Where to start? In 2018 the mantra became “another day, another data breach.” As a result, consumers and researchers alike are feeling “breach fatigue” and getting a bit numb to the headline. But the reality is, cybercriminals are going after personal information, credit card info and passwords...

lux-hotels.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-712296 Description| Value ---|--- Affected Website:| lux-hotels.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| hidd...

Marriott Hack Reported as Chinese State-Sponsored

The New York Times and Reuters are reporting that China was behind the recent hack of Marriott Hotels. Note that this is still uncomfirmed, but interesting if it is true. Reuters: Private investigators looking into the breach have found hacking tools, techniques and procedures previously used in...

hotels-for-everyone.com XSS vulnerability

Open Bug Bounty ID: OBB-709875 Description| Value ---|--- Affected Website:| hotels-for-everyone.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Marriott hotel data breach: Sensitive data of 500 million guests stolen

By Waqas Marriott has announced that it has suffered a massive data breach after attackers hacked its guest reservation system at Starwood hotels, a group of hotels the company took over in 2016 - These hotels include Sheraton, St. Regis, Westin and W Hotels. The breach was discovered last week...

500 Million Marriott Guest Records Stolen in Starwood Data Breach

The world's biggest hotel chain Marriott International today disclosed that unknown hackers compromised guest reservation database its subsidiary Starwood hotels and walked away with personal details of about 500 million guests. Starwood Hotels and Resorts Worldwide was acquired by Marriott...

hotels-tenby.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-693010 Description| Value ---|--- Affected Website:| hotels-tenby.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| hidden until...

luxe-hotels-resorts.nl XSS vulnerability

Open Bug Bounty ID: OBB-673814 Description| Value ---|--- Affected Website:| luxe-hotels-resorts.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Hackers selling data of 130 million Chinese hotel clients on Dark Web for 8 BTC

By Waqas Now, this could easily be termed as one of the largest ever data hacks in the history of China. Reportedly, the data of roughly 130 million clients of the renowned Huazhu Hotels Group, China is up for sale at the Dark Web at the meager amount of 8 bitcoins US$56,000. The price is extreme...

nyctourist.com XSS vulnerability

Open Bug Bounty ID: OBB-670920 Description| Value ---|--- Affected Website:| nyctourist.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hotels-for-everyone.com XSS vulnerability

Open Bug Bounty ID: OBB-663624 Description| Value ---|--- Affected Website:| hotels-for-everyone.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

apollohotels.nl XSS vulnerability

Open Bug Bounty ID: OBB-656557 Description| Value ---|--- Affected Website:| apollohotels.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bulgaria-hotels.com XSS vulnerability

Open Bug Bounty ID: OBB-655798 Description| Value ---|--- Affected Website:| bulgaria-hotels.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

serbian-hotels.rs Improper Access Control vulnerability

Open Bug Bounty ID: OBB-649887 Description| Value ---|--- Affected Website:| serbian-hotels.rs Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

hotelsaccommodation.com.au XSS vulnerability

Open Bug Bounty ID: OBB-648156 Description| Value ---|--- Affected Website:| hotelsaccommodation.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

choicehotelsdevelopment.com XSS vulnerability

Open Bug Bounty ID: OBB-625776 Description| Value ---|--- Affected Website:| choicehotelsdevelopment.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hotels-und-pensionen.at XSS vulnerability

Open Bug Bounty ID: OBB-596577 Description| Value ---|--- Affected Website:| hotels-und-pensionen.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...