marathon-hurricane-lawyer-insurance-claim-damage.com XSS vulnerability

Open Bug Bounty ID: OBB-586009 Description| Value ---|--- Affected Website:| marathon-hurricane-lawyer-insurance-claim-damage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-...

key-largo-hurricane-lawyer-insurance-claim-damage.com XSS vulnerability

Open Bug Bounty ID: OBB-585646 Description| Value ---|--- Affected Website:| key-largo-hurricane-lawyer-insurance-claim-damage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting /...

key-west-hurricane-lawyer-insurance-claim-damage.com XSS vulnerability

Open Bug Bounty ID: OBB-585647 Description| Value ---|--- Affected Website:| key-west-hurricane-lawyer-insurance-claim-damage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-...

jupiter-hurricane-lawyer-insurance-claim-damage.com XSS vulnerability

Open Bug Bounty ID: OBB-585640 Description| Value ---|--- Affected Website:| jupiter-hurricane-lawyer-insurance-claim-damage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-7...

fort-myers-hurricane-lawyer-insurance-claim-damage.com XSS vulnerability

Open Bug Bounty ID: OBB-585479 Description| Value ---|--- Affected Website:| fort-myers-hurricane-lawyer-insurance-claim-damage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting /...

boca-raton-hurricane-lawyer-insurance-claim-damage.com XSS vulnerability

Open Bug Bounty ID: OBB-584302 Description| Value ---|--- Affected Website:| boca-raton-hurricane-lawyer-insurance-claim-damage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting /...

Keybase: Claiming ownership of GitHub handles via forked GitHub gists.

Description An attacker can claim ownership of a GitHub user's handle if the user forks the attacker's gist with a verification snippet generated by the attacker pointing towards the user's handle. PoC With my colleague's permission @jackds I claimed their GitHub handle with this gist:...

BELL-CVE-2018-2603 CVE-2018-2603 does not affect BellSoft software

Bulletin has no description...

Paragon Initiative Enterprises: [Critical] billion dollars issue

Hey, My name is El-Sisi also i have famous name is بلحه Balaha and i have found documents that confirm you the github inc belong to you. if you need this documents give me reward and i will give u that documents. why i'm doing this because my mother tell me if you see some things like that you mu...

epfoservices.in XSS vulnerability

Vulnerable URL: http://www.epfoservices.in/claimstatusinfo-newlogic.php?officename=1"...

How to configure ADFS Claim Rules and StoreFront with Multiple Domains

How to configure ADFS Claim Rules and StoreFront with multiple domains?...

DEBIAN-CVE-2017-6413

The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" aka modauthopenidc module before 2.1.6 for the Apache HTTP Server does not skip OIDCCLAIM and OIDCAuthNHeader headers in an "AuthType oauth20" configuration, which allows remote attackers to bypass authentication via crafted HTTP...

ABAX Triplog - Mileage claim - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ABAX Triplog - Mileage claim published at the 'play' market has multiple vulnerabilities...

Starbucks: Subdomain takeover on happymondays.starbucks.com due to non-used AWS S3 DNS record

Hi, I discovered that happymondays.starbucks.com DNS CNAME record is pointing to S3 AWS bucket which doesn't exist. Here's the screenshot of vulnerable domain: F138556 As happymondays.starbucks.com was free to register on AWS S3 service and DNS-setup is already correct set-up: F138557 I was able ...

WebSummit: Full Sub Domain Takeover at s3.websummit.net

Hey The sub domain at s3.websummit.net is pointing to dws-content.s3-website-eu-west-1.amazonaws.com. http://s3.websummit.net/ 404 Not Found Code: NoSuchBucket Message: The specified bucket does not exist BucketName: s3.websummit.net RequestId: DB4C92F0D805D3F3 HostId:...

Snapchat: Subdomain takeover of blog.snapchat.com

Overview The ANAME for blog.snapchat.com, which redirects to snapchat-blog.com, was pointing to tumblr for Snapchat's blog. This blog had been expired or had removed the CNAME claim. Adding "snapchat-blog.com" to the custom domain setting on tumblr allowed takeover of this subdomain. Repro Steps ...

Claim Bitcoin - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Claim Bitcoin published at the 'play' market has multiple vulnerabilities...

The hacker can bypass the validation into a malicious software-vulnerability warning-the black bar safety net

From the last Association is exposure products pre-installed potentially dangerous software last only 3 months, the company again outgoing security. According to security firm IOActive claim that they in the Lenovo System Update software found on the major vulnerabilities, a hacker can bypass the...

X (Formerly Twitter): URGENT - SUBDOMAIN TAKEOVER ON TWITTER ACQ.

Hello Twitter Security Team, I reccomend you to read this report with the maximum attention! This is the same isse that you ever see here: https://hackerone.com/reports/42236 and here https://hackerone.com/reports/32825. Well ,now, the acquisition where I found this domain is: trendrr.tv..Before...

Threat Outbreak Alert: Fake Annual Authorization Form Attachment Email Messages on October 31, 2013

Medium Alert ID: 31588 First Published: 2013 October 31 19:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an authorization form to use privately owned vehicles on state business. The text in the email message attempt...