53 matches found
EUVD-2024-33532
Malicious code in bioql PyPI...
MAL-2025-44696 Malicious code in indigo_ngdyn_cwmlg_crown (npm)
The package indigongdyncwmlgcrown was found to contain malicious code...
MAL-2025-21980 Malicious code in grove_1cieh_0ae8a_crown (npm)
The package grove1cieh0ae8acrown was found to contain malicious code...
Malicious code in crown_zup1y_wopna_voyage (npm)
The package crownzup1ywopnavoyage was found to contain malicious code...
CVE-2024-10774
Unauthenticated CROWN APIs allow access to critical functions. This leads to the accessibility of large parts of the web application without authentication...
CVE-2024-10774 SICK InspectorP61x and SICK InspectorP62x have unauthenticated CROWN APIs
Unauthenticated CROWN APIs allow access to critical functions. This leads to the accessibility of large parts of the web application without authentication...
SICK InspectorP61x和SICK InspectorP62x 安全漏洞
The SICK InspectorP61x and SICK InspectorP62x are both ultra-compact industrial 2D vision sensors from SICK, Germany. A security vulnerability exists in the SICK InspectorP61x version prior to 5.0.0 and InspectorP62x version prior to 5.0.0, which stems from an unauthenticated CROWN API that allow...
crown-dent.ru Cross Site Scripting vulnerability OBB-3898430
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Addressing cybersecurity at the board level with Difenda and Microsoft
This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. Cybersecurity is no longer simply a lone silo or regulatory process; it is a business issue that affects every aspect of an organization. From financial losses to reputational damage...
alabamacrown.meltdev.net Cross Site Scripting vulnerability OBB-2563605
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Reforming the UK’s Computer Misuse Act
The UK Home Office recently ran a Call for Information to investigate the Computer Misuse Act 1990 CMA. The CMA is the UK’s anti-hacking law, and as Rapid7 is active in the UK and highly engaged in public policy efforts to advance security, we provided feedback on the issues we see with the...
sea-crown.com Cross Site Scripting vulnerability OBB-1427307
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
crown-caps-king.com Cross Site Scripting vulnerability OBB-1405018
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
crown-shades.com Cross Site Scripting vulnerability OBB-1193398
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Did Saudi Crown Prince use Israeli spyware to hack Jeff Bezos’s iPhone?
By Waqas According to the UN high commissioner for human rights, Bezos’s iPhone was hacked using NSO Group’s spyware called... This is a post from HackRead.com Read the original post: Did Saudi Crown Prince use Israeli spyware to hack Jeff Bezos’s iPhone?...
Crown Sterling Claims to Factor RSA Keylengths First Factored Twenty Years Ago
Earlier this month, I made fun of a company called Crown Sterling, for...for...for being a company that deserves being made fun of. This morning, the company announced that they "decrypted two 256-bit asymmetric public keys in approximately 50 seconds from a standard laptop computer." Really. The...
The Doghouse: Crown Sterling
A decade ago, the Doghouse was a regular feature in both my email newsletter Crypto-Gram and my blog. In it, I would call out particularly egregious -- and amusing -- examples of cryptographic "snake oil." I dropped it both because it stopped being fun and because almost everyone converged on...
crystal-crown.gamerch.com XSS vulnerability
Open Bug Bounty ID: OBB-651364 Description| Value ---|--- Affected Website:| crystal-crown.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
triplecrowncorp.com XSS vulnerability
Open Bug Bounty ID: OBB-645266 Description| Value ---|--- Affected Website:| triplecrowncorp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
crownfordredding.cms.dealer.com XSS vulnerability
Open Bug Bounty ID: OBB-634138 Description| Value ---|--- Affected Website:| crownfordredding.cms.dealer.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...