kareplusmailer.co.uk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1256309 Security Researcher xav0 Helped patch 804 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting kareplusmailer.co.uk website and its users. Following...

Researcher retrieves $300,000 worth of Bitcoin from an encrypted Zip file

By Waqas An investor had locked $300k worth of Bitcoin in an encrypted Zip file and forgot its password. This is a post from HackRead.com Read the original post: Researcher retrieves $300,000 worth of Bitcoin from an encrypted Zip file...

Researcher Demonstrates Several Zoom Vulnerabilities at DEF CON 28

Popular video conferencing app Zoom has addressed several security vulnerabilities, two of which affect its Linux client that could have allowed an attacker with access to a compromised system to read and exfiltrate Zoom user data—and even run stealthy malware as a sub-process of a trusted...

U.S. Dept Of Defense: SQLi on █████████

Researcher discovered a Boolean-based SQLi on a Dept. of Defense asset. Discovered a boolean-based SQLi on a Dept. of Defense asset...

ICSA-20-212-02_Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.3 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: Mitsubishi Electric, Multiple Factory Automation Engineering Software products Vulnerability: Permission Issues 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update...

cloudnra-fra-emea.net.nokia.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1241156 Security Researcher MaxP0wer666 Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting cloudnra-fra-emea.net.nokia.com website and its users. Following coordinated and responsible vulnerability disclosure...

ktronix.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1236449 Security Researcher foreverunc Helped patch 49 vulnerabilities Received 3 Coordinated Disclosure badges Received 2 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting ktronix.com website and it...

berylo.eu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1232442 Security Researcher xav0 Helped patch 640 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting berylo.eu website and its users. Following coordinated and...

PayPal: RCE via npm misconfig -- installing internal libraries from the public registry

A Bug Bounty researcher identified an issue where certain development projects defaulted to the public NPM registry, instead of using the intended internal packages. Since the packages on the public registry did not exist, the researcher created these and observed they were downloaded. Had these...

grovefineart.co.uk Cross Site Scripting vulnerability OBB-1226813

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

delarouquine.nl Cross Site Scripting vulnerability OBB-1226638

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

digitalschnitt.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1225447 Security Researcher raz0rbl4de Helped patch 44 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting digitalschnitt.de website and its users. Following...

klemm-music.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1224385 Security Researcher raz0rbl4de Helped patch 44 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting klemm-music.de website and its users. Following...

routenplaner24.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1224336 Security Researcher raz0rbl4de Helped patch 37 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting routenplaner24.de website and its users. Following...

arcws.com Cross Site Scripting vulnerability OBB-1220997

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

grin.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1219871 Security Researcher raz0rbl4de Helped patch 44 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting grin.com website and its users. Following coordinated...

tuniscope.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1219572 Security Researcher foreverunc Helped patch 49 vulnerabilities Received 3 Coordinated Disclosure badges Received 2 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting tuniscope.com website and...

mwfleet.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1214862 Security Researcher xav0 Helped patch 496 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting mwfleet.de website and its users. Following coordinated an...

Afternoon Cyber Tea: Cybersecurity & IoT: New risks and how to minimize them

Recently, Microsoft announced our acquisition of CyberX, a comprehensive network-based security platform with continuous threat monitoring and analytics. This solution builds upon our commitment to provide a unified IoT security solution that addresses connected devices spread across both...

EvilQuest Mac Ransomware Has Keylogger, Crypto Wallet-Stealing Abilities

A rare new ransomware strain targeting macOS users has been discovered, called EvilQuest. Researchers say the ransomware is being distributed via various versions of pirated software. EvilQuest, first discovered by security researcher Dinesh Devadoss, goes beyond the normal encryption capabilitie...