careers.cathaypacific.com Cross Site Scripting vulnerability OBB-3854649

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

careers.cathaypacific.com Cross Site Scripting vulnerability OBB-3751600

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

A week in security (October 22 – 28)

Last week on Malwarebytes Labs, we took a look at some new Mac malware, gave you a roundup of 2018 exploit kits, and dispensed some advice on sextortion scams. We also looked at the Cathay Pacific breach, groaned at the revival of an old browser trick, and explained how voting machines and...

Cathay Pacific hit by massive data breach; 10 million passengers affected

By Waqas Hong Kong's Cathay Pacific Airways Limited has suffered a massive data breach in which personal data of 9.4 million customers has been stolen by unknown hackers. Cathay Pacific states that the stolen data includes passenger name, date of birth, nationality, email, phone number, frequent...

Huge breach affects 9 million Cathay Pacific customers

Airlines aren’t having a good time of things at the moment. Even if you managed to dodge the recent British Airways fallout, you may well be caught up in the latest breach affecting no fewer than 9 million customers of Cathay Pacific. So what was taken? The impact this time around isn’t so much...

upgrade.cathaypacific.com XSS vulnerability

Open Bug Bounty ID: OBB-608074 Description| Value ---|--- Affected Website:| upgrade.cathaypacific.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

products.cathaypacific.com XSS vulnerability

Open Bug Bounty ID: OBB-385808 Description| Value ---|--- Affected Website:| products.cathaypacific.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

cathaypacific.com Open Redirect vulnerability

Vulnerable URL:...

products.cathaypacific.com XSS vulnerability

Vulnerable URL: http://products.cathaypacific.com/premiumeconomy-test/sc/experience/?key=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

lifewelltravelled.cathaypacific.com XSS vulnerability

Open Bug Bounty ID: OBB-169760 Description| Value ---|--- Affected Website:| lifewelltravelled.cathaypacific.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

HKEx - Hong Kong stock exchange Hacked

HKEx - Hong Kong stock exchange Hacked Trading in Hong Kong was disrupted on Wednesday by a hacking incident on the Hong Kong Exchange website. "Our current assessment that this is a result of a malicious attack by outside hacking ," Charlies Li, chief executive of Hong Kong Exchanges & Clearing,...