viphotelsusa.com XSS vulnerability

Open Bug Bounty ID: OBB-590882 Description| Value ---|--- Affected Website:| viphotelsusa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

oway.com.mm XSS vulnerability

Open Bug Bounty ID: OBB-576416 Description| Value ---|--- Affected Website:| oway.com.mm Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Forever 21 Says PoS Systems Exposed Customer Data for 8 Months

Fashion retailer Forever 21 confirmed a breach made public in November resulted in the theft of credit card data belonging to an undisclosed number of customers. The company had stated that a lack of encryption used on some of its point-of-sales payment terminals could have resulted in unauthoriz...

hotels-expert.nl XSS vulnerability

Open Bug Bounty ID: OBB-455133 Description| Value ---|--- Affected Website:| hotels-expert.nl Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

treebo.com XSS vulnerability

Open Bug Bounty ID: OBB-454145 Description| Value ---|--- Affected Website:| treebo.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Booking.com Hotels & Vacation Rentals - Hardcoded secrets, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Booking.com Hotels & Vacation Rentals published at the 'play' market has multiple vulnerabilities...

hotels.cloudbeds.com XSS vulnerability

Vulnerable URL: https://hotels.cloudbeds.com/reservation/oL7RdR?checkin=%27%22%2F%3E%3E%3C%2Fscript%3E%3Cscript%3Ealert%2FOPENBUGBOUNTY%2F%3C%2Fscript%3E=/post Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 00:22 GMT Vulnerability type:| XSS...

environmentallyfriendlyhotels.com XSS vulnerability

Open Bug Bounty ID: OBB-388685 Description| Value ---|--- Affected Website:| environmentallyfriendlyhotels.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6...

preferredhotels.com XSS vulnerability

Open Bug Bounty ID: OBB-278971 Description| Value ---|--- Affected Website:| preferredhotels.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Trump Hotels Hit By 3rd Card Breach in 2 Years

Maybe some of you missed this amid all the breach news recently I know I did, but Trump International Hotels Management LLC last week announced its third credit-card data breach in the past two years. I thought it might be useful to see these events plotted on a timeline, because it suggests that...

Hard Rock, Loews Hotels Among Sabre Corp Hospitality Breach Victims

For the second time in the past year the Hard Rock Hotels and Casinos franchise is encouraging guests to keep tabs on their bank account statements for suspicious activity. The hotel, resort, and casino chain on Thursday said it was alerted on June 6 that its systems were impacted by a security...

MakeMyTrip-Flights Hotels Cabs - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MakeMyTrip-Flights Hotels Cabs published at the 'play' market has multiple vulnerabilities...

nadlerhotels.com XSS vulnerability

Vulnerable URL: https://www.nadlerhotels.com/1/%22%3E%3Csvg/onload=%22alert'OPENBUGBOUNTY'%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1080808 VIP website status:| No Chec...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

Hackers Steal Payment Card Data From Over 1,150 InterContinental Hotels

InterContinental Hotels Group IHG is notifying its customers that credit card numbers and other sensitive information may have been stolen after it found malware on payment card systems at 1,174 franchise hotels in the United States. It's the second data breach that U.K.-based IHG, which owns...

InterContinental Hotel Chain Breach Expands

In December 2016, KrebsOnSecurity broke the news that fraud experts at various banks were seeing a pattern suggesting a widespread credit card breach across some 5,000 hotels worldwide owned by InterContinental Hotels Group IHG. In February, IHG acknowledged a breach but said it appeared to invol...

IHG Confirms Second Credit Card Breach Impacting 1,000-Plus Hotels

In what’s becoming a familiar refrain to guests, InterContinental Hotels Group, said late last week that payment card systems at more than 1,000 of its hotels had been breached. It’s the second breach that IHG, a multinational hotel conglomerate that counts Holiday Inn and Crowne Plaza among its...

This Ransomware Malware Could Poison Your Water Supply If Not Paid

Ransomware has been around for a few years, but in last two years, it has become an albatross around everyone's neck, targeting businesses, hospitals, financial institutions and personal computers worldwide and extorting millions of dollars. Ransomware is a type of malware that infects computers...

InterContinental Hotels Confirms Credit Card Breach

InterContinental Hotels Group IHG, parent company to Crowne Plaza, Holiday Inn and Kimpton Hotels and Resorts, confirmed on Friday a breach of payment card systems used in 12 of its hotels located in North America and the Caribbean. According to IHG, which operates 5,000 hotels worldwide, malware...

treebohotels.com XSS vulnerability

Vulnerable URL: http://www.treebohotels.com/search/?query=Mumbai,%20Maharashtra,%20India=19.0759837%27"--!=72.87765590000004=Mumbaisource=Emailmedium=netcorecampaign=valentinesmumterm=aff5' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| X...