reviews.birdeye.com XSS vulnerability

Open Bug Bounty ID: OBB-565772 Description| Value ---|--- Affected Website:| reviews.birdeye.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

legitreviews.com XSS vulnerability

Open Bug Bounty ID: OBB-563020 Description| Value ---|--- Affected Website:| legitreviews.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Zomato: [www.zomato.com] Privilege Escalation - Control reviews - /████dashboard_handler.php

Introduction The handler that controls all the ███ actions for reviews is accessible for any user. The following actions are thus being left open to anyone: getmanagerstatus read███████ unread██████████ ████████ feature██████ unfeature████████ moderate████ unmoderate█████ drop ███ sendmail...

testberichte.reviews XSS vulnerability

Open Bug Bounty ID: OBB-446185 Description| Value ---|--- Affected Website:| testberichte.reviews Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

October 4, 2017 – Morning Cyber Coffee Headlines – “Nobel Prize” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! October 4, 2017 - Headlines Carbon Black in the News: Kangaroo Ransomware uses...

Cb Defense Praised in Independent Tests, Product Reviews

Earlier this week, Carbon Black announced the Q3 release of Cb Defense, which features breakthrough streaming ransomware prevention as well as live response capability. Following this announcement, three independent security organizations published reviews and reports confirming the efficacy of C...

New Techniques in Fake Reviews

Research paper: "Automated Crowdturfing Attacks and Defenses in Online Review Systems." Abstract: Malicious crowdsourcing forums are gaining traction as sources of spreading misinformation online, but are limited by the costs of hiring and managing human workers. In this paper, we identify a new...

jsntgm.com XSS vulnerability

Vulnerable URL: http://www.jsntgm.com/reviews.asp?bandsearch=283=1/-///'/"//--...

Microsoft's New Security Update Guides Get Mixed Reviews

Microsoft is receiving mixed reviews for its shift to delivering security update information via its newly launched Security Update Guides. The change was official in April, with Microsoft explaining it would allow system administrators to effectively pair specific patches with vulnerabilities, a...

WordPress WP Customer Reviews plugin <= 3.0.8 - Cross-Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF Vulnerability was found in WordPress WP Customer Reviews plugin in 3.0.8 version. There's no nonce check to prevent CSRF attack. Solution Update the plugin...

WordPress WP Customer Reviews plugin <= 3.0.8 - Cross-Site Request Forgery (CSRF)/Cross-Site Scripting (XSS) Vulnerabilities

Cross-Site Request Forgery CSRF/Cross-Site Scripting XSS Vulnerabilities were found in WordPress WP Customer Reviews plugin in 3.0.8 version. In version 3.0.8, and some earlier versions on this page /wp-admin/admin.php?page=wpcr3options&tab=formsettings the nonce is not included so there's no...

Job Search, Salaries & Reviews - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Job Search, Salaries & Reviews published at the 'play' market has multiple vulnerabilities...

Announcing the new Bug Bounty Program for Office Insider Builds on Windows

We’ve engineered Office to be secure by design and continually invest in enhancing its security capabilities. In the spirit of maintaining a high security bar in Office, we’re launching the Bug Bounty Program for Office Insider Builds on Windows. The Office Bug Bounty Program complements our...

PT-2017-8755

Name of the Vulnerable Software and Affected Versions Openstack Puppet module for Gerrit affected versions not specified Description The issue is related to the Gerrit configuration in the Openstack Puppet module, where text/html is improperly marked as a safe mimetype. This could potentially all...

digitaltrends.com XSS vulnerability

Vulnerable URL: http://www.digitaltrends.com/laptop-reviews/page/21/?orderby=rating'%22alert/OPENBUGBOUNTY/...

Magento Community Edition < 1.9.2.3 Multiple Vulnerabilities

Binary data 9679.prm...

digitaltrends.com XSS vulnerability

Vulnerable URL: http://www.digitaltrends.com/appliance-reviews/?order=DESC'%22alert/OPENBUGBOUNTY/...

Shopify: Stored XSS in https://productreviews.shopifyapps.com/proxy/v4/reviews/product

Hi , I have found a stored XSS issue in https://productreviews.shopifyapps.com Details: Going to https://productreviews.shopifyapps.com/proxy/v4/reviews/product?productid=8254331011&version=v4&shop=zh5403-attacker.myshopify.com&=cache&callback=test will show you the details of a product with the ...

Boozt Fashion AB: XSS

Researcher reported a XSS vulnerability that could be executed on our internal systems by submitting XSS payload to 3rd party service that we were using to fetch reviews from...

Kaspersky Lab Bug Bounty Program Launches

LAS VEGAS – Kaspersky Lab today at Black Hat USA 2016 announced the launch of a public bug bounty, one of the few offered by a software vendor in the computer security industry. The bounty begins tomorrow on the HackerOne platform, and the first phase will run for six months. The company said tha...