TSA’s Terrorist Watch List Comes for Amtrak Passengers

Plus: Microsoft seizes Russian GRU domains, Cash App’s data breach, and Obama’s disinfo admission...

m.amtrak.com Open Redirect vulnerability

Vulnerable URL: https://m.amtrak.com/mt/espanol.amtrak.com/amtrak/enes/?1023749633;http://openbugbounty.org/ Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 10:35 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed...

trip.amtrak.com XSS vulnerability

Vulnerable URL: http://trip.amtrak.com/activitysearches/new?type="// Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

jobs.amtrak.com XSS vulnerability

Vulnerable URL: https://jobs.amtrak.com/talentcommunity/subscribe/?slp=/talentcommunity/profile/%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| Yes, at 18.08.2016 Latest check for patch:| 18.08.2016 11:03 GMT Vulnerability type:| XSS Vulnerability status:|...