Friday Squid Blogging: Dead Squid on Prince Edward Island

A beach on Prince Edward Island is littered with dead squid. No one knows why. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

geraniotisbeach.com XSS vulnerability

Open Bug Bounty ID: OBB-646569 Description| Value ---|--- Affected Website:| geraniotisbeach.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

freedomvolvovirginiabeachvcna.cms.dealer.com XSS vulnerability

Open Bug Bounty ID: OBB-631599 Description| Value ---|--- Affected Website:| freedomvolvovirginiabeachvcna.cms.dealer.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv...

Virginia Beach Police Want Encrypted Radios

This article says that the Virginia Beach police are looking to buy encrypted radios. Virginia Beach police believe encryption will prevent criminals from listening to police communications. They said officer safety would increase and citizens would be better protected. Someone should ask them if...

lander.redondobeachhomefinder.com XSS vulnerability

Open Bug Bounty ID: OBB-585892 Description| Value ---|--- Affected Website:| lander.redondobeachhomefinder.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6...

mainbeachqueensland.com.au XSS vulnerability

Open Bug Bounty ID: OBB-576594 Description| Value ---|--- Affected Website:| mainbeachqueensland.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

e-services.co.palm-beach.fl.us XSS vulnerability

Open Bug Bounty ID: OBB-483714 Description| Value ---|--- Affected Website:| e-services.co.palm-beach.fl.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

airliebeachqueensland.com XSS vulnerability

Open Bug Bounty ID: OBB-472386 Description| Value ---|--- Affected Website:| airliebeachqueensland.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventi...

mylocal.palmbeachpost.com XSS vulnerability

Open Bug Bounty ID: OBB-466833 Description| Value ---|--- Affected Website:| mylocal.palmbeachpost.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3469-2)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3469-2 advisory. USN-3469-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enableme...

USN-3469-2: Linux kernel (Xenial HWE) vulnerabilities

USN-3469-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. Anthony Perard discovered that the Xen virtual block driver did not properly initializ...

USN-3469-1: Linux kernel vulnerabilities

Anthony Perard discovered that the Xen virtual block driver did not properly initialize some data structures before passing them to user space. A local attacker in a guest VM could use this to expose sensitive information from the host OS or other guest VMs. CVE-2017-10911 Bo Zhang discovered tha...

Boom Beach - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Boom Beach published at the 'play' market has multiple vulnerabilities...

Friday Squid Blogging: Live Squid Washes up on North Carolina Beach

A "mysterious squid" -- big and red -- washed up on a beach in Carteret County, North Carolina. Someone found it, still alive, and set it back in the water after taking some photos of it. Squid scientists later decided it was a diamondback squid. So, you think that O'Shea might know the identity ...

www2.palmbeachpost.com XSS vulnerability

Open Bug Bounty ID: OBB-150159 Description| Value ---|--- Affected Website:| www2.palmbeachpost.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Sweet Baby Girl - Beach Picnic - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Sweet Baby Girl - Beach Picnic published at the 'play' market has multiple vulnerabilities...

Build It! Miami Beach Resort - Base64 encoded String, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Build It! Miami Beach Resort published at the 'play' market has multiple vulnerabilities...

Beach Buggy Blitz - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Beach Buggy Blitz published at the 'play' market has multiple vulnerabilities...

Beach Buggy Racing - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Beach Buggy Racing published at the 'play' market has multiple vulnerabilities...

Food Maker! Beach Party - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Food Maker! Beach Party published at the 'play' market has multiple vulnerabilities...