Lock and Code S1Ep16: Investigating digital vulnerabilities with Samy Kamkar

This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to Samy Kamkar, chief security officer and co-founder of Open Path, about the digital vulnerabilities in our physical world. If you look through a recent...

ibiza-jeep-safari.com Cross Site Scripting vulnerability OBB-1290149

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Black Hat 2018: IoT Security Issues Will Lead to Legal ‘Feeding Frenzy’

LAS VEGAS – The troves of insecure internet of things IoT devices have not yet led to widespread legal implications. But that’s set to change, a well-known attorney warned at Black Hat USA last week. Ijay Palansky, partner at the law firm Armstrong Teasdale, said at the conference last week that...

jeep-outfitter.com XSS vulnerability

Open Bug Bounty ID: OBB-595227 Description| Value ---|--- Affected Website:| jeep-outfitter.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

autoonegroup.it XSS vulnerability

Open Bug Bounty ID: OBB-592944 Description| Value ---|--- Affected Website:| autoonegroup.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jeep-compass-panamer.com XSS vulnerability

Open Bug Bounty ID: OBB-588856 Description| Value ---|--- Affected Website:| jeep-compass-panamer.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jeep-plandeahorro.com XSS vulnerability

Open Bug Bounty ID: OBB-588857 Description| Value ---|--- Affected Website:| jeep-plandeahorro.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jeep-club.net XSS vulnerability

Open Bug Bounty ID: OBB-462383 Description| Value ---|--- Affected Website:| jeep-club.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

Hooligans Biker Gang Arrested for Hacking and Stealing 150 Jeep Wranglers

By Jahanzaib Hassan Now in the custody of the FBI, a gang calling itself the Hooligans Motorcycle Gang, had launched an operation in South California whereby they stole over a hundred Jeep Wranglers and moved them to Mexico where they would either sell the entire jeep or sell its parts. The...

carlgregorychryslerdodgejeepofalbany.com XSS vulnerability

Open Bug Bounty ID: OBB-221502 Description| Value ---|--- Affected Website:| carlgregorychryslerdodgejeepofalbany.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

chapmanchryslerjeepnevada.com XSS vulnerability

Vulnerable URL: http://chapmanchryslerjeepnevada.com/all-inventory/index.htm?listingConfigId=AUTO-new,AUTO-used"'--!confirmOPENBUGBOUNTY...

adamsjeepofmaryland.com XSS vulnerability

Vulnerable URL: http://www.adamsjeepofmaryland.com/all-inventory/index.htm?listingConfigId=AUTO-new,AUTO-used"'--!confirmOPENBUGBOUNTY...

jeep.com XSS vulnerability

Vulnerable URL: https://www.jeep.com/exitpage/index.html?tname=jeepblog=javascript:alert'OPENBUGBOUNTY' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13919 VIP website status:| Ye...

jeep.com XSS vulnerability

Vulnerable URL: https://www.jeep.com/exitpage/index.html?tname=jeepblog=javascript:alert%27OPENBUGBOUNTY%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12640 VIP website status:| Yes Check jeep.com SSL...

Fiat Chrysler Launches Bug Bounty with $1.5K Payout Cap

Hacking Jeeps is about to get a lot more competitive. That’s because Jeep maker Fiat Chrysler Automobiles has launched a bug bounty program in conjunction with Bugcrowd that will payout as much as $1,500 per bug. Fiat Chrysler, the world’s No. 7 automaker, claims it will be the first Detroit...

Oil Producer Saudi Aramco twitter account hacked

Twitter continues to implement new security features. But really, who thinks social media will ever be unhackable? The official twitter account of Saudi Aramco, the world's biggest oil producer hacked by hacker with name 'Mister Rero'. The background on Saudi Aramco’s official Twitter page and th...