Election Security

Good Washington Post op-ed on the need to use voter-verifiable paper ballots to secure elections, as well as risk-limiting audits...

Washington State Marijuana Tracking System Hacked to Steal Route Data

By Waqas Problems for Washington Marijuana Industry Twofold After New Marijuana-Tracking Software This is a post from HackRead.com Read the original post: Washington State Marijuana Tracking System Hacked to Steal Route Data...

mountwashington.ca XSS vulnerability

Open Bug Bounty ID: OBB-555735 Description| Value ---|--- Affected Website:| mountwashington.ca Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

law.washington.edu XSS vulnerability

Open Bug Bounty ID: OBB-533611 Description| Value ---|--- Affected Website:| law.washington.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pqasb.pqarchiver.com XSS vulnerability

Open Bug Bounty ID: OBB-470190 Description| Value ---|--- Affected Website:| pqasb.pqarchiver.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

secure.pqarchiver.com XSS vulnerability

Open Bug Bounty ID: OBB-470183 Description| Value ---|--- Affected Website:| secure.pqarchiver.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Two Romanians Charged With Hacking Police CCTV Cameras Before Trump Inauguration

Remember how some cybercriminals shut down most of Washington D.C. police's security cameras for four days ahead of President Donald Trump's inauguration earlier this year? Just a few days after the incident, British authorities arrested two people in the United Kingdom, identified as a British m...

commerce.washingtonpost.com XSS vulnerability

Vulnerable URL: http://commerce.washingtonpost.com/cgi-bin/WPclass/shopping/shopSearchUsed?VERTICAL=merchandise=284=%22--%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3Eoffice%20furniture Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability...

washingtonpost.loveaccess.com XSS vulnerability

Open Bug Bounty ID: OBB-453460 Description| Value ---|--- Affected Website:| washingtonpost.loveaccess.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

co.washington.or.us XSS vulnerability

Open Bug Bounty ID: OBB-447320 Description| Value ---|--- Affected Website:| co.washington.or.us Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

new.washingtoncity.org XSS vulnerability

Open Bug Bounty ID: OBB-443557 Description| Value ---|--- Affected Website:| new.washingtoncity.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

execustay.com XSS vulnerability

Open Bug Bounty ID: OBB-369633 Description| Value ---|--- Affected Website:| execustay.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

October 21, 2017 – Morning Cyber Coffee Headlines – “British Parliament” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! October 21, 2017 - Headlines Carbon Black in the News: Not good: Ransomware is...

How to Minimize Leaking

I am hopeful that President Trump will not block release of the remaining classified documents addressing the 1963 assassination of President John F. Kennedy. I grew up a Roman Catholic in Massachusetts, so President Kennedy always fascinated me. The 1991 Oliver Stone movie JFK fueled several yea...

msntravelnursing.com XSS vulnerability

Vulnerable URL: https://www.msntravelnursing.com/apply-travel-nurse-jobs?brand=MSN%20TRAVEL=null=DC=RN%20%20ICU%20%20%20%20Job%20in%20WASHINGTON%20%20%20%20%20%20%20%20%20%20,DC=TRAVEL=null=1550417'%22%26%25prompt/XSSPOSED/...

washington.thedelimagazine.com XSS vulnerability

Vulnerable URL: http://washington.thedelimagazine.com/poll/poll.php?category=13'"13 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline...

depts.washington.edu XSS vulnerability

Vulnerable URL: https://depts.washington.edu/wagis/projects/parcels/producers/qaqc/summary.php?nid=168"';--=430 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

Speakers and Mics hacked to turn Music Into Surveillance Tool

By Waqas University of Washington’s Paul G. Allen School of Computer Science This is a post from HackRead.com Read the original post: Speakers and Mics hacked to turn Music Into Surveillance Tool...

dahp.wa.gov XSS vulnerability

Vulnerable URL: http://www.dahp.wa.gov/learn-and-research/architect-biographies/clifford-b-dobson!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS...

Schweitzer Engineering Laboratories, Inc. SEL-3620 and SEL-3622

CVSS v3 7.2 ATTENTION: Remotely exploitable/Low skill level to exploit. Vendor: Schweitzer Engineering Laboratories, Inc. SEL Equipment: SEL-3620, SEL-3622 Vulnerability: Improper Access Control AFFECTED PRODUCTS The following versions of SEL-3620 and SEL-3622, an Ethernet Security Gateway, are...