origin-sg.millenniumhotels.com XSS vulnerability

Vulnerable URL: https://origin-sg.millenniumhotels.com/en/bookings/?hotelcode=13476%27%22%3C/script/%3C/Noscript/%3C/Pre/%3C/Xmp%3E%3CSvg%20/Onload=confirmOPENBUGBOUNTY%3E=2017-01-24=2017-01-26===frnfam=2=0=false=false=false=false=1 Details: Description| Value ---|--- Patched:| No Latest check fo...

gallery.millenniumhotels.com XSS vulnerability

Vulnerable URL: http://gallery.millenniumhotels.com/exc/aspquery?command=invoke=13552=141388%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E〈=en Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

military-hotels.us XSS vulnerability

Vulnerable URL: http://military-hotels.us/js/inc/gmapiframe.php?type=a=12=38.31802644541942-121.99810531250001=38.27222-121.95416=600%27"--!=670=13' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

reporting.warnerleisurehotels.co.uk XSS vulnerability

Vulnerable URL: http://reporting.warnerleisurehotels.co.uk/cgi-bin/msite?rafanon+a+0+0+0+0+0?%22%3E%3Cscript%20src=//www.openbugbounty.org/1.js%3E%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...

Book Homestay, Hotels & Villas - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Book Homestay, Hotels & Villas published at the 'play' market has multiple vulnerabilities...

Red Planet Hotels - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Red Planet Hotels published at the 'play' market has multiple vulnerabilities...

Vera Bradley Retail Chain Breached

Retailer Vera Bradley warned customers on Wednesday of a compromise of its point-of-sale system that allowed hackers to make off with an undisclosed number of credit card records. The breach impacts only retail customers who shopped at one of 159 Vera Bradley locations between July 25 and Sept. 2...

TripAdvisor Hotels Restaurants - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application TripAdvisor Hotels Restaurants published at the 'play' market has multiple vulnerabilities...

Westin, Marriott, Sheraton Hotels Hit By Payment Card Malware

Hotels from Vermont to California have been victimized in a data breach that may have leaked payment data from tens of thousands of point of sale purchases. Customers who frequented 20 hotels run by HEI Hotels and Resorts, a hospitality owner that counts hotel chains like Marriott, Sheraton, and...

Priceline Hotels, Flight & Car - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Priceline Hotels, Flight & Car published at the 'play' market has multiple vulnerabilities...

Kimpton Hotels Investigating Payment Card Fraud

Kimpton Hotels & Restaurants, a nationwide chain of 62 boutique hotels, is investigating a string of unauthorized charges on payment cards used at a number of its locations. It’s unknown how many cards are involved, nor at which locations. A Kimpton representative told Threatpost that an...

auction.starwoodhotels.com XSS vulnerability

Open Bug Bounty ID: OBB-164552 Description| Value ---|--- Affected Website:| auction.starwoodhotels.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Hyatt Hotels - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Hyatt Hotels published at the 'play' market has multiple vulnerabilities...

communicate.apexhotels.co.uk XSS vulnerability

Vulnerable URL: https://communicate.apexhotels.co.uk/login.php?message=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

sansihotels.com XSS vulnerability

Vulnerable URL: http://www.sansihotels.com/hotels.php?id=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7594362 VIP website...

Opodo - Flights, Hotels & Cars - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Opodo - Flights, Hotels & Cars published at the 'play' market has multiple vulnerabilities...

eSky Flights Hotels Rent a Car - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application eSky Flights Hotels Rent a Car published at the 'play' market has multiple vulnerabilities...

momondo Cheap Flights & Hotels - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application momondo Cheap Flights & Hotels published at the 'play' market has multiple vulnerabilities...

HolidayCheck - Hotels & Travel - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application HolidayCheck - Hotels & Travel published at the 'play' market has multiple vulnerabilities...

Orbitz - Flights, Hotels, Cars - Base64 encoded String, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Orbitz - Flights, Hotels, Cars published at the 'play' market has multiple vulnerabilities...