Coinbase: Sending payments via QR code does not require confirmation

Coinbase pushed out a feature whereby scanning a QR code inside the Coinbase Mobile app would complete payments under 0.1BTC without further confirmation. Upon reviewing this report and further consideration of the possible security implications of this feature, it was reverted. This issue has a...

Threat Outbreak Alert RuleID21922: Email Messages Distributing Malicious Software on March 25, 2016

Medium Alert ID: 44308 First Published: 2016 March 25 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21922 may contain the following files: Name | Si...

yourmtvtop20.mtv.co.uk XSS vulnerability

Vulnerable URL: http://www.yourmtvtop20.mtv.co.uk/?chartid=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

CVE-2016-1770

The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...

CVE-2016-1770

The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...

CVE-2016-1770

The CVE-2016-1770 issue affects the Reminders component in OS X El Capitan prior to 10.11.4. Root cause: a tel: URL triggering a dialing action without user confirmation due to insufficient entitlement checks. Impact: ability to trigger a call without prompting the user. Mitigation: Apple release...

CVE-2016-1770

The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...

See how I withdraw your QQ message, not fix-bug warning-the black bar safety net

0x01 Specific ideas: In with the PC end of windows chat, First you need to put the QQ chat friends window using colorful bubbles off, Then you send each other a message,right click your message, There will be a withdraw option,don't worry. point, Waiting for the other to send a message to come ov...

Threat Outbreak Alert RuleID21778: Email Messages Distributing Malicious Software on March 17, 2016

Medium Alert ID: 44180 First Published: 2016 March 18 18:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21778 may contain the following files: Name | Si...

New Relic: no email confirmation on signup

the email confirmation is not taken anyone can make newrelic account from any email address...

wondershare.de XSS vulnerability

Vulnerable URL: http://wondershare.de/servers/public/index.php?c=product= Details: Description| Value ---|--- Patched:| Yes, at 16.08.2016 Latest check for patch:| 16.08.2016 10:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 61169 Google Pagerank| 4 VIP...

Threat Outbreak Alert RuleID21459: Email Messages Distributing Malicious Software on March 10, 2016

Medium Alert ID: 44049 First Published: 2016 March 10 22:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21459KVR may contain the following files: Name |...

New Relic: CSRF - Regenerate all admin api keys

Hi The request to regenerate all admin api keys is a GET request without CSRF protection. As such, you can regenerate someone's keys using csrf. While not too big of an issue the admin can always see the keys and use them its certainly annoying and can cause business disruption. Additionally, a...

Legal Robot: Rate limiting on Email confirmation link

Security researcher discovered a potential issue where no rate limiting was applied to sensitive functions, like email reconfirmation links...

lutherie-france.com XSS vulnerability

Vulnerable URL: http://www.lutherie-france.com/flashdetection.swf?flashContentURL=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website...

heisthelife.com XSS vulnerability

Vulnerable URL: http://www.heisthelife.com/pops/Video.asp?VideoName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

dh.miraeis.com XSS vulnerability

Vulnerable URL: http://dh.miraeis.com/gameZone.asp?gameName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

prdaily.com Open Redirect vulnerability

Vulnerable URL: http://www.prdaily.com/Click.aspx?url=http://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 43103 Google Pagerank| 0 VIP website status:|...

jerseyfinder.com Open Redirect vulnerability

Vulnerable URL: http://www.jerseyfinder.com/transfer.asp?linkid=557=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Goog...

times-footballclub.com XSS vulnerability

Vulnerable URL: http://www.times-footballclub.com/teammemberinfoimg.php?teamname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...