Reliance Jio Customers' Data Allegedly Hacked – Company Denies Breach

Personal details of some 120 Million customers have been allegedly exposed on the Internet in probably the biggest breach of personal data ever in India. Last night, an independent website named Magicapk.com went online, offering Reliance Jio customers to search for their identification data Know...

india.com XSS vulnerability

Vulnerable URL: http://www.india.com/mcsignup Details: Description| Value ---|--- Patched:| Yes, at 02.10.2017 Latest check for patch:| 02.10.2017 09:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 973 VIP website status:| Yes Coordinated Disclosure Timeline:...

basoindia.org XSS vulnerability

Vulnerable URL: http://basoindia.org/ContentPage.php?id=107=schools%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Type=Text%20AutoFocus%20/;%20OnFocus=confirmOPENBUGBOUNTY%20//%3E%3CSvg%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.10.2017 Vulnerability type:| XSS...

Facebook’s new feature to prevent misuse of profile pics

By Waqas The social media giant Facebook is introducing a new feature for users in India which will help them protect their online privacy by preventing others from misusing their profile picture. The feature is called Profile Picture Guard and is being rolled out after security and privacy...

Ola cabs - Book taxi in India - Exported ContentProvider, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Ola cabs - Book taxi in India published at the 'play' market has multiple vulnerabilities...

real.atozinandhra.com XSS vulnerability

Vulnerable URL: http://real.atozinandhra.com/SearchPropertyResults.php?SearchCountryNameN=India=Andhra%20Pradesh=1/-///'/"//--...

rahul.hyundaimotor.in XSS vulnerability

Open Bug Bounty ID: OBB-245649 Description| Value ---|--- Affected Website:| rahul.hyundaimotor.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Starbucks: Unable to register in starbucks app

Unable to register in starbucks India app due to weak crypography of passwords...

casioindiashop.com XSS vulnerability

Vulnerable URL: https://www.casioindiashop.com/search.php/?q=%3Cscript%3Ealert%22OPENBUGBOUNTY%22%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 29.07.2017 Latest check for patch:| 29.07.2017 19:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Beware! Fireball Malware Infects Nearly 250 Million Computers Worldwide

Security researchers have discovered a massive malware campaign that has already infected more than 250 million computers across the world, including Windows and Mac OS. Dubbed Fireball, the malware is an adware package that takes complete control of victim's web browsers and turns them into...

Modified Zyklon and plugins from India

IntroductionStreams of malicious emails Talos inspects every day usually consist of active spamming campaigns for various ransomware families, phishing campaigns and the common malware family suspects such as banking Trojans and bots.. It is however often more interesting to analyze campaigns...

wiese-india.com XSS vulnerability

Vulnerable URL: http://wiese-india.com/transfer/list.asp?Lid=31=;185;%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22info=Wiese%20Europe/Safety%20Systemsdetail=83 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:|...

Fixed in Apache Tomcat 7.0.78

Important: Security Constraint Bypass CVE-2017-5664 The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error page. This means that the...

Fixed in Apache Tomcat 8.0.44

Important: Security Constraint Bypass CVE-2017-5664 The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error page. This means that the...

Fixed in Apache Tomcat 9.0.0.M21

Important: Security Constraint Bypass CVE-2017-5664 The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error page. This means that the...

Fixed in Apache Tomcat 8.5.15

Important: Security Constraint Bypass CVE-2017-5664 The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error page. This means that the...

Information disclosure

The State Bank of India State Bank Anywhere app 5.1.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5901

The CVE-2017-5901 entry concerns the State Bank of India State Bank Anywhere app for iOS (version 5.1.0). The connected documents confirm a root cause in which the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and potentially obtain sensiti...

CVE-2017-5901

The State Bank of India State Bank Anywhere app 5.1.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Qualys Support for Reserve Bank of India (RBI) Cyber Security Guidelines

Reserve Bank of India RBI, India's central banking and monetary authority, points out that the number, frequency, and impact of cyber incidents on Indian banks has increased substantially. Like their peers globally, Indian banks are committed to maintaining customer trust, protecting financial...