MAL-2023-902 Malicious code in trint-bbc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f755e08a2f5b395630482a2784cdf65bd712c263238d4df7302e087c47be52e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Sponsored Twitter post uses fake BBC News site to boost slippery oil trading app

A sponsored post on Twitter promises to offer the benefits of obtaining citizenship, but really just wants to lure you into some form of Forex trading AI scheme. This tangled web also includes faked BBC web pages and suspicious-looking website reviews to round the whole thing off. Shall we take a...

awards.bbcgoodfoodme.com Cross Site Scripting vulnerability OBB-2146508

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

China Aims Its Propaganda Firehose at the BBC

The alleged digital operation has deployed hundreds of websites and social media accounts to attack the broadcaster's reporting...

Smart Watches and Cheating on Tests

The Independent Commission on Examination Malpractice in the UK has recommended that all watches be banned from exam rooms, basically because it's becoming very difficult to tell regular watches from smart watches...

Btlejack - Bluetooth Low Energy Swiss-army Knife

Btlejack provides everything you need to sniff, jam and hijack Bluetooth Low Energy devices. It relies on one or more BBC Micro:Bit. devices running a dedicated firmware. You may also want to use an Adafruit's Bluefruit LE sniffer or a nRF51822 Eval Kit, as we added support for these devices...

shop.bbc.com XSS vulnerability

Open Bug Bounty ID: OBB-684782 Description| Value ---|--- Affected Website:| shop.bbc.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unt...

bbc.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-684763 Description| Value ---|--- Affected Website:| bbc.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bbcamerica.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-625397 Description| Value ---|--- Affected Website:| bbcamerica.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

bbc-cromwell.org Improper Access Control vulnerability

Open Bug Bounty ID: OBB-616825 Description| Value ---|--- Affected Website:| bbc-cromwell.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

bbcwine.fr XSS vulnerability

Open Bug Bounty ID: OBB-586664 Description| Value ---|--- Affected Website:| bbcwine.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bbcrecords.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-579629 Description| Value ---|--- Affected Website:| bbcrecords.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

airman (=0.0.1), bbc-a11y (=1.3.4) +8 more potentially affected by CVE-2018-1000006 via electron (>=1.6.0 <=1.6.15)

electron NPM version =1.6.0, =1.6.0, =0.0.15, =3.0.0, =0.1.10, =0.1.10, =0.1.11 Source cves: CVE-2018-1000006 Source advisory: OSV:GHSA-W222-53C6-C86P...

U.K. Man Avoids Jail Time in vDOS Case

A U.K. man who pleaded guilty to launching more than 2,000 cyberattacks against some of the world's largest companies has avoided jail time for his role in the attacks. The judge in the case reportedly was moved by pleas for leniency that cited the man's youth at the time of the attacks and a...

ssl.bbc.co.uk XSS vulnerability

Vulnerable URL:...

genome.ch.bbc.co.uk XSS vulnerability

Vulnerable URL: http://genome.ch.bbc.co.uk/page/45e6a961820a4bed9b52c1ea5316797b?page=x%22%3E%3CsvG%20onLoad=prompt9%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:...

bbc.co.uk Open Redirect vulnerability

Vulnerable URL: http://www.bbc.co.uk/modules/musicnav/language/gd?page=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 18.09.2017 Latest check for patch:| 18.09.2017 09:49 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa...

bbc.openlinksw.com XSS vulnerability

Vulnerable URL: http://bbc.openlinksw.com/HtmlPivotViewer/?url=https://www.openlinksw.com/ ","",ViewerState: "";;...

bbc.com XSS vulnerability

Vulnerable URL: http://www.bbc.com/earth/'-alert'OPENBUGBOUNTY'-' Details: Description| Value ---|--- Patched:| Yes, at 20.12.2016 Latest check for patch:| 20.12.2016 00:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 110 VIP website status:| Yes Check bbc.co...

Bitcoin Creator Has Finally Unmasked Himself. Maybe, Real?

The mysterious creator of the BITCOIN digital cryptocurrency seems to have been identified as an Australian entrepreneur, and his name is: Craig Steven Wright. Five months after Wright, an Australian computer scientist and businessman was outed as Satoshi Nakamoto, revealed himself as the origina...