vulcan-steel.com GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1031121 Security Researcher MrBug Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting vulcan-steel.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO...

bumigrp.com GDPR PII Exposure vulnerability

Security Researcher MrBug Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting bumigrp.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:...

Razer: THX Tuneup Survey feedback disclosure via Google cached content for apps.thx.com

Summary: If you use this google dork: site:apps.thx.com, you will notice many of the links no longer work. However, in the cached versions, they contain lots of sensitive user information from users who seemingly filled out a survey, including first and last name, zip code, gender, email, country...

CVE-2019-16752

An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. It is possible to force wallets to send HTTP requests to arbitrary locations, both on the local network and on the internet. This is a serious threat to user privacy, since it can possibly leak their IP...

CVE-2019-16752

An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. It is possible to force wallets to send HTTP requests to arbitrary locations, both on the local network and on the internet. This is a serious threat to user privacy, since it can possibly leak their IP...

Design/Logic Flaw

An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. It is possible to force wallets to send HTTP requests to arbitrary locations, both on the local network and on the internet. This is a serious threat to user privacy, since it can possibly leak their IP...

comxepto.com GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1025398 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

FortiOS 6.0.6 / FortiClientWindows 6.0.6 / FortiClientMac 6.2.1 XOR Encryption Vulnerability

Fortinet products, including FortiGate and Forticlient, regularly send information to Fortinet servers using XOR "encryption" with a static key. FortiClientWindows versions 6.0.6 and below, and FortiClientMac versions 6.2.1 and below. After this advisory was released, Fortinet has confirmed that...

projetos.prime.cv GDPR PII Exposure vulnerability

Security Researcher karthi Helped patch 5 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting projetos.prime.cv website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Boun...

okawabus.com Open Redirect vulnerability

Security Researcher Disst Helped patch 864 vulnerabilities Received 3 Coordinated Disclosure badges Received 3 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting okawabus.com website and its users. Following coordinated and...

photoenvision.com GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1021834 Security Researcher offensi74555475 Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting photoenvision.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines...

macs.hw.ac.uk GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1021824 Security Researcher offensi74555475 Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting macs.hw.ac.uk website and its users. Following coordinated and responsible vulnerability disclosure guidelines of...

monitor.somafm.com GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1020579 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Firefox DNS over HTTPS (DoH) and Enterprise Threat Protector

Recursive DNS communications are normally unencrypted between a client and a resolver. In an effort to improve user privacy and address security concerns, Mozilla announced it would begin enabling DNS over HTTPS DoH by default in its Firefox browser. However, Mozilla recognized it would be...

Execs Could Face Jail Time For Privacy Violations

A new data privacy bill threatens large tech firms, like Facebook, with tough penalties – including monetary fines and up to 20 years of jail time for executives – if they violate user privacy policies. The “Mind Your Own Business Act,” proposed by Sen. Ron Wyden D-Ore. on Thursday, gives the...

Twitter Uses Phone Numbers, Emails to Sell Ads

Twitter has acknowledged that user phone numbers and email addresses gathered for security purposes, as part of its two-factor authentication policy, may have been used to sell ads. It calls the move an accident. The revelation is being widely criticized for its obvious breach of user privacy,...

OPENSUSE-SU-2019:2288-1 Security update for singularity

This update for singularity fixes the following issues: singularity was updated to version 3.4.1: This point release addresses the following issues: - Fixes an issue where a PID namespace was always being used - Fixes compilation on non 64-bit architectures - Allows fakeroot builds for zypper,...

Venmo's Public Transactions Policy Stirs Privacy Concerns

Your simple $5 Venmo payment to a friend after splitting a pizza could easily expedite various malicious attacks, from stalking to spear-phishing, according to researcher concerns. Many have weighed in on Venmo’s privacy practices, but the latest are Mozilla Foundation and the Electronic Frontier...

vyfakturuj.cz GDPR PII Exposure vulnerability

Security Researcher DakkarKey Helped patch 406 vulnerabilities Received 6 Coordinated Disclosure badges Received 14 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting vyfakturuj.cz website and its users. Following coordinate...

Google Proposes 'Privacy Sandbox' to Develop Privacy-Focused Ads

Google today announced a new initiative—called Privacy Sandbox—in an attempt to develop a set of open standards that fundamentally enhances privacy on the web while continuing to support a free, open and democratic Internet through digital advertisements. A lot of websites on the Internet today,...