gibsoncounty-in.gov XSS vulnerability

Vulnerable URL: http://www.gibsoncounty-in.gov/departments/solidwaste/layouts/15/viewlsts.aspx?FollowSite=0=%27-confirm%27OPENBUGBOUNTY%27-%27 Details: Description| Value ---|--- Patched:| Yes, at 07.12.2017 Latest check for patch:| 07.12.2017 07:56 GMT Vulnerability type:| XSS Vulnerability...

conpct6.harriscountytx.gov XSS vulnerability

Vulnerable URL: https://conpct6.harriscountytx.gov/layouts/15/viewlsts.aspx?FollowSite=0=%27-confirm%27OPENBUGBOUNTY%27-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

August 23, 2017 – Morning Cyber Coffee Headlines – “Boston Celtics” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 23, 2017 - Headlines No U.S.-Russia Cyber Unit Without Trump Notifying...

gcdcimmigrationrecords.galvestoncountytx.gov XSS vulnerability

Vulnerable URL: http://gcdcimmigrationrecords.galvestoncountytx.gov/signup.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

Commentary on US Election Security

Good commentaries from Ed Felten and Matt Blaze. Both make a point that I have also been saying: hacks can undermine the legitimacy of an election, even if there is no actual voter or vote manipulation. Felten: The second lesson is that we should be paying more attention to attacks that aim to...

co.hinds.ms.us XSS vulnerability

Vulnerable URL: http://www.co.hinds.ms.us/pgs/cal/results.asp?Judge=Stokes=Civil=1"...

kentcounty.shelterbuddy.com XSS vulnerability

Vulnerable URL: https://kentcounty.shelterbuddy.com/scripts/calendar.asp?field=dispatchDateFrom=1=2017===1"...

kburby.sugarpinerealty.com XSS vulnerability

Vulnerable URL: http://kburby.sugarpinerealty.com/listings/query.php?elegant=yescategory=1=6=109=1"...

taxcommissioner.dekalbcountyga.gov XSS vulnerability

Vulnerable URL: http://taxcommissioner.dekalbcountyga.gov/TaxCommissioner/TCCityTaxDetail.asp?Roll=PP=1"...

parktakes.fairfaxcounty.gov XSS vulnerability

Open Bug Bounty ID: OBB-253740 Description| Value ---|--- Affected Website:| parktakes.fairfaxcounty.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

it-frs.net XSS vulnerability

Vulnerable URL: https://www.it-frs.net/VendorSearch.asp?type=All=C=FRESNO= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3825865 VIP website status:| No Check it-frs.net SSL...

events.carr.org XSS vulnerability

Vulnerable URL: http://events.carr.org/allegany/evanced/roomrequest.asp?AllRoomsCheck==1=Allegany%20County%20Library%20System%20Room%20Request=1/-///'/"//--...

gateway.okhistory.org XSS vulnerability

Vulnerable URL: http://gateway.okhistory.org/explore/partners/OKHS/browse/?fq=strtitleserial:The%2520Harmon%2520County%2520Tribune'%22%26%25prompt/OPENBUGBOUNTY/...

co.harrison.ms.us XSS vulnerability

Open Bug Bounty ID: OBB-250493 Description| Value ---|--- Affected Website:| co.harrison.ms.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

indigentdefense.gwinnettcounty.com XSS vulnerability

Vulnerable URL: https://indigentdefense.gwinnettcounty.com/jcatsgwinnettpd/Login.asp?JcatsServerName=1/-///'/"//--...

CVE-2017-9591

The "PCB Mobile" by Phelps County Bank app 3.0.2 -- aka pcb-mobile/id436891295 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-9591

The "PCB Mobile" by Phelps County Bank app 3.0.2 -- aka pcb-mobile/id436891295 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The "PCB Mobile" by Phelps County Bank app 3.0.2 -- aka pcb-mobile/id436891295 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-9591

The "PCB Mobile" by Phelps County Bank app 3.0.2 -- aka pcb-mobile/id436891295 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-9589

CVE-2017-9589 affects the iOS app “SCSB Shelbyville IL Mobile Banking” (version 3.0.0, app ID id938960224). The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing a man‑in‑the‑middle to spoof servers and obtain sensitive information via a crafted certifica...