ibiza-services.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-847267 Security Researcher calv1n Helped patch 22043 vulnerabilities Received 12 Coordinated Disclosure badges Received 37 recommendations , a holder of 12 badges for responsible and coordinated disclosure, found a security vulnerability affecting ibiza-services.com websit...

dieform.net Cross Site Scripting vulnerability

Security Researcher amlnspqr Helped patch 1850 vulnerabilities Received 7 Coordinated Disclosure badges Received 36 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting dieform.net website and its users. Following coordinated...

imkerei-walter.de Cross Site Scripting vulnerability

Security Researcher CoderYounes Helped patch 1033 vulnerabilities Received 5 Coordinated Disclosure badges Received 8 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting imkerei-walter.de website and its users. Following...

kocaeliyasam.net Cross Site Scripting vulnerability

Security Researcher calv1n Helped patch 22043 vulnerabilities Received 12 Coordinated Disclosure badges Received 37 recommendations , a holder of 12 badges for responsible and coordinated disclosure, found a security vulnerability affecting kocaeliyasam.net website and its users. Following...

corsair.com Cross Site Scripting vulnerability

Security Researcher ftLoic Helped patch 157 vulnerabilities Received 3 Coordinated Disclosure badges Received 2 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting corsair.com website and its users. Following coordinated and...

The Shenanigans Behind a Stealthy Apple Keychain Attack

An 18-year-old security researcher made headlines earlier this year with KeySteal, a macOS hack. Now he's showing the world how it worked...

ilprocessocivile.it Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-844376 Security Researcher rcdxmlt Helped patch 64 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting ilprocessocivile.it website and its users. Following...

ndlumbres.fr Cross Site Scripting vulnerability

Security Researcher Gh05tPT Helped patch 6846 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting ndlumbres.fr website and its users. Following coordinate...

caliciconegliano.it Cross Site Scripting vulnerability

Security Researcher Gh05tPT Helped patch 6846 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting caliciconegliano.it website and its users. Following...

chunggoo.co.kr Cross Site Scripting vulnerability

Security Researcher CoderYounes Helped patch 1033 vulnerabilities Received 5 Coordinated Disclosure badges Received 8 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting chunggoo.co.kr website and its users. Following...

beloitdailynews.wi.newsmemory.com Cross Site Scripting vulnerability

Security Researcher AndreaDraghetti Helped patch 19 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting beloitdailynews.wi.newsmemory.com website and its users. Following coordinated a...

bangla.jagoroniya.com Cross Site Scripting vulnerability

Security Researcher logindenied Helped patch 7927 vulnerabilities Received 8 Coordinated Disclosure badges Received 76 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting bangla.jagoroniya.com website and its users. Following...

emec.gov.pt Cross Site Scripting vulnerability

Security Researcher VFPAP Helped patch 47 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting emec.gov.pt website and its users. Following coordinated and responsible vulnerability...

Behind the Naming of ZombieLoad and Other Intel Spectre-Like Flaws

There was a lot more to the name game behind choosing titles for ZombieLoad, Spectre and Meltdown than picking cool and edgy attack titles. If you have ever wondered why they were named what they were, Threatpost tracked down one of the researchers behind the naming convention and discovery and...

Philips Tasy EMR (Update A)

1. EXECUTIVE SUMMARY --------- Begin Update A Part 1 of 7 --------- CVSS v3 4.3 ATTENTION: Low skill level to exploit --------- End Update A Part 1 of 7 --------- Vendor: Philips Equipment: Tasy EMR --------- Begin Update A Part 2 of 7 --------- Vulnerability: Cross-site Scripting, Information...

WiFi finder app exposes millions of WiFi network passwords

By Uzair Amir The app is called WiFi Finder - connect to hotspots. WiFi Finder, a popular and widely downloaded hotspot finder app designed for Android devices has been identified to be exposing passwords of WiFi networks for over two million networks. The exposed database was identified by GDI...

Hacker Breaks Into French Government's New Secure Messaging App

A white-hat hacker found a way to get into the French government's newly launched, secure encrypted messaging app that otherwise can only be accessed by officials and politicians with email accounts associated with the government identities. Dubbed "Tchap ," the end-to-end encrypted, open source...

Over 100 Million JustDial Users' Personal Data Found Exposed On the Internet

An unprotected database belonging to JustDial, India's largest local search service, is leaking personally identifiable information of its every customer in real-time who accessed the service via its website, mobile app, or even by calling on its fancy "88888 88888" customer care number, The Hack...

Session invalidation upon password changes

Date : 2019-04-09 CVE ID : CVE-2019-10641 Description Security researcher Ali Razzaq has discovered that existing sessions are not correctly invalidated when a user changes their password in the back end or front end. Affected versions Contao 3. up to 3.5.38 Contao 4.0 Contao 4.1 Contao 4.2 Conta...

Invalidating opt-in tokens

Date : 2019-04-09 CVEID : CVE-2019-10643 Description Security researcher Ali Razzaq has discovered that confirming an opt-in token does not invalidate previous opt-in tokens in Contao 4.7. Affected versions Contao 4.7 up to 4.7.2 Suggested solution Update to Contao 4.7.3...