jsntgm.com XSS vulnerability

Vulnerable URL: http://www.jsntgm.com/reviews.asp?bandsearch=283=1/-///'/"//--...

Microsoft's New Security Update Guides Get Mixed Reviews

Microsoft is receiving mixed reviews for its shift to delivering security update information via its newly launched Security Update Guides. The change was official in April, with Microsoft explaining it would allow system administrators to effectively pair specific patches with vulnerabilities, a...

WordPress WP Customer Reviews plugin <= 3.0.8 - Cross-Site Request Forgery (CSRF)/Cross-Site Scripting (XSS) Vulnerabilities

Cross-Site Request Forgery CSRF/Cross-Site Scripting XSS Vulnerabilities were found in WordPress WP Customer Reviews plugin in 3.0.8 version. In version 3.0.8, and some earlier versions on this page /wp-admin/admin.php?page=wpcr3options&tab=formsettings the nonce is not included so there's no...

WordPress WP Customer Reviews plugin <= 3.0.8 - Cross-Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF Vulnerability was found in WordPress WP Customer Reviews plugin in 3.0.8 version. There's no nonce check to prevent CSRF attack. Solution Update the plugin...

Job Search, Salaries & Reviews - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Job Search, Salaries & Reviews published at the 'play' market has multiple vulnerabilities...

Announcing the new Bug Bounty Program for Office Insider Builds on Windows

We’ve engineered Office to be secure by design and continually invest in enhancing its security capabilities. In the spirit of maintaining a high security bar in Office, we’re launching the Bug Bounty Program for Office Insider Builds on Windows. The Office Bug Bounty Program complements our...

PT-2017-8755

Name of the Vulnerable Software and Affected Versions Openstack Puppet module for Gerrit affected versions not specified Description The issue is related to the Gerrit configuration in the Openstack Puppet module, where text/html is improperly marked as a safe mimetype. This could potentially all...

digitaltrends.com XSS vulnerability

Vulnerable URL: http://www.digitaltrends.com/laptop-reviews/page/21/?orderby=rating'%22alert/OPENBUGBOUNTY/...

Magento Community Edition < 1.9.2.3 Multiple Vulnerabilities

Binary data 9679.prm...

digitaltrends.com XSS vulnerability

Vulnerable URL: http://www.digitaltrends.com/appliance-reviews/?order=DESC'%22alert/OPENBUGBOUNTY/...

Shopify: Stored XSS in https://productreviews.shopifyapps.com/proxy/v4/reviews/product

Hi , I have found a stored XSS issue in https://productreviews.shopifyapps.com Details: Going to https://productreviews.shopifyapps.com/proxy/v4/reviews/product?productid=8254331011&version=v4&shop=zh5403-attacker.myshopify.com&=cache&callback=test will show you the details of a product with the ...

Boozt Fashion AB: XSS

Researcher reported a XSS vulnerability that could be executed on our internal systems by submitting XSS payload to 3rd party service that we were using to fetch reviews from...

Raptor - Web-based Source Code Vulnerability Scanner

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

Kaspersky Lab Bug Bounty Program Launches

LAS VEGAS – Kaspersky Lab today at Black Hat USA 2016 announced the launch of a public bug bounty, one of the few offered by a software vendor in the computer security industry. The bounty begins tomorrow on the HackerOne platform, and the first phase will run for six months. The company said tha...

HNB 1.9.18-10 - Local Buffer Overflow

HNB 1.9.18-10 - Local Buffer Overflow Exploit developed using Exploit Pack v5.4 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: HNB - Organizer Version: 1.9.18-10 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program...

Google to Face a Record $3.4 Billion AntiTrust Fine in Europe

Google faces a record anti-trust penalty of about 3 BILLION Euros US$3.4 Billion from the European Commission in the coming days, according to reports. After 7-years of the investigation, the European Commission filed anti-trust charges against Google last year for violating antitrust laws. The...

Tech News & Reviews - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Tech News & Reviews published at the 'play' market has multiple vulnerabilities...

Coinbase: Race condition allowing user to review app multiple times

There was a race condition present that would allow a user to review an OAuth application multiple times...

toysrus.de XSS vulnerability

Vulnerable URL: http://www.toysrus.de/reviews/index.jsp?productId=44692391...

With Its First Android app, Apple tried to Kill Android Community, But Failed Badly!

Are you a Die Hard Android Fan? If you are also one of those millions Android fans, for whom the brand has turned into an insane religious devotion, then Apple has something that could give you second thoughts. Apple is losing control, wants you to ditch your Android! Few days ago, Apple made its...