228 matches found
vacationwithpurpose.org Cross Site Scripting vulnerability OBB-1379956
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-12645
OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/load memory consumption...
CVE-2020-12645
OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/load memory consumption...
Input validation
OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/load memory consumption...
CVE-2020-12645
CVE-2020-12645 affects OX App Suite 7.10.1–7.10.3. The root cause is improper input validation for rate limits, manifested via crafted User-Agent headers, spoofed vacation notices, and memory consumption in /apps/load. Documented impact is memory/resource exhaustion with potential service impact,...
CVE-2020-12645
OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/load memory consumption...
Tips for a Cyber Safe Vacation
As summer nears, many people will soon be taking vacations. When planning vacations, users should be aware of potential rental scams and “free” vacation ploys. Travelers should also keep in mind risks related to travelling with mobile devices. The Cybersecurity and Infrastructure Security Agency...
Friday Squid Blogging: A Squid-Related Vacation Tour in Hawaii
You can hunt for the Hawaiian bobtail squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
CVE-2019-9484
The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtain access via an HTTP session on port 10000, as demonstrated by reading the modem password which is 1234, or reconfiguring "party mode" or "vacation mode."...
CVE-2019-9484
The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtain access via an HTTP session on port 10000, as demonstrated by reading the modem password which is 1234, or reconfiguring "party mode" or "vacation mode."...
CVE-2019-9484
The CVE-2019-9484 entry concerns Glen Dimplex Deutschland GmbH’s implementation of the Carel pCOWeb configuration tool. The vulnerability allows remote attackers to gain access through an HTTP session on port 10000, enabling reading of the modem password and reconfiguration of “party mode” or “va...
jmvacations.ca XSS vulnerability
Open Bug Bounty ID: OBB-674278 Description| Value ---|--- Affected Website:| jmvacations.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
World Cup, Vacation Scams Lead in Phishing Trips this Summer
Summer is one of the traditional seasons of scamming, and this summer is shaping up to be a hot one on that front, with active campaigns swirling around supposed “security incidents,” vacation bookings and, of course, the World Cup. Scammers, for instance, recently targeted Booking.com customers...
rentals.holidayoc.com XSS vulnerability
Open Bug Bounty ID: OBB-578130 Description| Value ---|--- Affected Website:| rentals.holidayoc.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
radiumvalleyvacationresort.com XSS vulnerability
Open Bug Bounty ID: OBB-560206 Description| Value ---|--- Affected Website:| radiumvalleyvacationresort.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
livephuket.com XSS vulnerability
Open Bug Bounty ID: OBB-549938 Description| Value ---|--- Affected Website:| livephuket.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Booking.com Hotels & Vacation Rentals - Hardcoded secrets, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Booking.com Hotels & Vacation Rentals published at the 'play' market has multiple vulnerabilities...
#CbChats: Chris Strand Chats GDPR, Compliance Evolution & His Favorite Vacation Spot
In today's edition of CbChats, Carbon Black's Chris Strand chats about GDPR, the evolution of compliance in recent years and his favorite vacation spot in the world. https://www.carbonblack.com/wp-content/uploads/2017/11/ChrisStrandCbChats.mp3 About Chris Strand Christopher Strand leads Carbon...
petvacationhomes.com XSS vulnerability
Open Bug Bounty ID: OBB-256100 Description| Value ---|--- Affected Website:| petvacationhomes.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Ready Set Vacation! - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Ready Set Vacation! published at the 'play' market has multiple vulnerabilities...