69 matches found
courts.michigan.gov Improper Access Control vulnerability OBB-2123360
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Sealed U.S. Court Records Exposed in SolarWinds Breach
The ongoing breach affecting thousands of organizations that relied on backdoored products by network software firm SolarWinds may have jeopardized the privacy of countless sealed court documents on file with the U.S. federal court system, according to a memo released Wednesday by the...
pas.albertacourts.ab.ca Cross Site Scripting vulnerability OBB-1247794
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
News Wrap: Ransomware Extortion Tactics, Contact-Tracing App Security Worries
Threatpost editors discuss the top news stories of the week ended May 15, including: Recent ransomware attacks, including ones targeting healthcare giant Magellan, the IT office that supports Texas appellate courts and judicial agencies, and a popular law firm that works with several A-list...
Texas Courts Won't Pay Up in Ransomware Attack
A ransomware attack has hit the information technology office that supports Texas appellate courts and judicial agencies, leading to their websites and computer servers being shut down. The office said that it will not pay the ransom requested by the cybercriminals. Specifically affected is the...
les-courts-circuits.fr Improper Access Control vulnerability
Open Bug Bounty ID: OBB-1070826 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2019-15569
HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.java and SortDirection.java...
Sql injection
HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.java and SortDirection.java...
CVE-2019-15569
Summary (CVE-2019-15569): HM Courts & Tribunals CCD data-store-api prior to 2019-06-10 is vulnerable to SQL injection, as reported in multiple sources. The issue affects the data-store API’s query handling, specifically related to SearchQueryFactoryOperation.java and SortDirection.java, allowing ...
CVE-2019-15569
HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.java and SortDirection.java...
Ransomware Hits Georgia Courts as Municipal Attacks Spread
Almost every month in 2019 so far has seen reports of a local government falling prey to ransomware, but this series of attacks belies an even broader threat...
courts.ri.gov XSS vulnerability
Vulnerable URL: https://www.courts.ri.gov/PublicResources/forms/Pages/default.aspx?FollowSite=0=%27-confirm%27OPENBUGBOUNTY%27-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
A week in security (September 4 – September 10)
Last week, we looked into expired domain names being used for malvertising, delved into dubious Facebook apps, and checked out Chinese seminar scams. We also explained the whys and wherefores of false positives, explained what Google is doing with HTTPs, warned you away from a fake DHS email, and...
adr.riverside.courts.ca.gov XSS vulnerability
Vulnerable URL: http://adr.riverside.courts.ca.gov/fl/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...
Google Gets Record-Breaking $2.7 Billion Fine for Manipulating Search Results
Google has just lost its biggest regulatory battle! Google has been hit with a record-breaking $2.7 billion €2.42 billion fine by the European antitrust officials for unfairly manipulating search results since 2008. After a lengthy seven-year investigation that was launched in 2010 after several...
dubaicourts.gov.ae XSS vulnerability
Vulnerable URL: http://www.dubaicourts.gov.ae/portal/page/portal/dc/SphinxSearch?piref292587824292587819587819.searchString='"--!KNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...
courts.com.sg XSS vulnerability
Vulnerable URL: http://www.courts.com.sg/searchresult.html?searchText=dyson%27-confirmOPENBUGBOUNTY-%27' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 91331 VIP website status:| N...
courts.phila.gov XSS vulnerability
Vulnerable URL: http://www.courts.phila.gov/apps/clc/caselist.asp?search=%22%3E%3Cimg%20src=x%20onerror=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
Satellite-Based Monitoring Constitutes a Fourth Amendment Search
The Supreme Court has weighed in on a series of lower court decisions, issuing a summary opinion that satellite-based monitoring is in fact a Fourth Amendment search. What remains to be decided is whether GPS-based tracking constitutes an unreasonable search and is thus a violation of the Fourth...
Federal judge blocks NSA surveillance records from being destroyed
Last week, The Foreign Intelligence Surveillance Court FISA ruled the National Security Agency NSA to do not keep Internet and phone metadata gathered through bulk surveillance programs longer than five years and destroy them. Judge Reggie Walton said, keeping records for more than 5 years "would...