4 matches found
News Wrap: Barnes & Noble Hack, DDoS Extortion Threats and More
The Threatpost editors break down the top security stories of the week ended Oct. 16, including: Patch Tuesday insanity, with Microsoft and Adobe releasing fixes for severe vulnerabilities – including a critical, potentially wormable remote code execution bug known as the “Ping of Death” Barnes a...
customer.barnesandnoble.com XSS vulnerability
Open Bug Bounty ID: OBB-606590 Description| Value ---|--- Affected Website:| customer.barnesandnoble.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
bookclubs.barnesandnoble.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-455102 Description| Value ---|--- Affected Website:| bookclubs.barnesandnoble.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat...