387 matches found
caen-keepexploring.canada.travel Cross Site Scripting vulnerability OBB-1302309
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CISA Releases Joint Advisory on Approaches to Uncovering and Remediating Malicious Activity
The Cybersecurity and Infrastructure Security Agency CISA—in collaboration with the cybersecurity authorities of Australia, Canada, New Zealand, and the United Kingdom—has released a joint Cybersecurity Advisory that highlights technical approaches to uncovering malicious activity. This Advisory...
canadasoccer.com Cross Site Scripting vulnerability OBB-1269449
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Cyberattacks Hit Thousands of Canadian Tax, Benefit Accounts
Canadian authorities said almost 15,000 online accounts for various government services have been targeted in three recent waves of credential-stuffing attacks. These accounts could give attackers access to Canadians’ tax-related and benefits information, coronavirus relief fund money and more...
canada-local.com Cross Site Scripting vulnerability OBB-1238170
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
canadahotelbudapest.de Cross Site Scripting vulnerability OBB-1227935
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
New Android Malware Now Steals Passwords For Non-Banking Apps Too
BlackRock does the data collection by abusing Android's Accessibility Service privileges, for which it seeks users' permissions under the guise of fake Google updates when it's launched for the first time on the device, as shown in the shared screenshots. Subsequently, it goes on to grant itself...
canada.brick7.net Cross Site Scripting vulnerability OBB-1218906
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Emerging Ransomware Targets Photos, Videos on Android Devices
A new strain of ransomware has arisen in Canada, targeting Android users and locking up personal photos and videos. Called CryCryptor, it has initially been spotted pretending to be the official COVID-19 tracing app provided by Health Canada. It’s propagating via two different bogus websites that...
transpulseproject.ca Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1195723 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
escapismtravel.nexioncanada.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1169354 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
canada-co.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1153360 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting canada-co.com website...
NERC CIP Compliance in Azure vs. Azure Government cloud
As discussed in my last blog post on North American Electric Reliability Corporation—Critical Infrastructure Protection NERC CIP Compliance in Azure, U.S. and Canadian utilities are now free to benefit from cloud computing in Azure for many NERC CIP workloads. Machine learning, multiple data...
canada-immigration.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1142693 Security Researcher geeknik Helped patch 8938 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting canada-immigration.com...
Canada country code is incorrect in Windows 7 SP1 or Windows Server 2008 R2 SP1
Canada country code is incorrect in Windows 7 SP1 or Windows Server 2008 R2 SP1 Symptoms Assume that you have a computer that is running Windows 7 Service Pack 1 SP1 or Windows Server 2008 R2 SP1. You set the computer to use the English Canada language format in the Region and Language setting. I...
canada-college.net Improper Access Control vulnerability
Open Bug Bounty ID: OBB-1135771 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting canada-college.net website...
Insulet Omnipod
1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Low skill level to exploit/public exploits are known for this vulnerability Vendor: Insulet Equipment: Omnipod Insulin Management System Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an...
Shopify: [Part II] Email Confirmation Bypass in myshop.myshopify.com that Leads to Full Privilege Escalation
Summary In 791775, I submitted a bug at Sunday 5pm Canada time, it was triaged two hours later, and I got the temp fix message at around 3am the next day in Canada time. Truly awesome, the next day I retested after the first fix, and found that I - Cannot receive the email confirmation in the ema...
destination-canada-forum-emploi.ca Cross Site Scripting vulnerability
Security Researcher haxmov Helped patch 543 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting destination-canada-forum-emploi.ca website and its users...
canada-advisor.com Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8616 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting canada-advisor.com website and its users. Following...