40 matches found
Marriott Suffers Second Breach Exposing Data of 5.2 Million Hotel Guests
International hotel chain Marriott today disclosed a data breach impacting nearly 5.2 million hotel guests, making it the second security incident to hit the company in recent years. "At the end of February 2020, we identified that an unexpected amount of guest information may have been accessed...
TGI Fridays Delivers Customer Indigestion Over Data Exposure
Customers of TGI Fridays Australia were “strongly recommended” to change their MyFridays membership rewards program passwords. According to an email sent to customers this week, the company had inadvertently left sensitive loyalty program data exposed on the internet. News of the leaky server...
franchise-cession.com XSS vulnerability
Open Bug Bounty ID: OBB-668393 Description| Value ---|--- Affected Website:| franchise-cession.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
enerconfort-franchise.com XSS vulnerability
Open Bug Bounty ID: OBB-585430 Description| Value ---|--- Affected Website:| enerconfort-franchise.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
POS Malware Found at 160 Applebee’s Restaurant Locations
Malware was discovered on point of sales systems at more than 160 Applebee’s restaurants, exposing credit card information from unknowing diners. RMH Franchise Holdings, which owns and operates more than 160 Applebee’s stores across the U.S., said that it recently discovered malware infecting its...
franchise-cession.com XSS vulnerability
Open Bug Bounty ID: OBB-382582 Description| Value ---|--- Affected Website:| franchise-cession.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...
papamurphys.1851franchise.com XSS vulnerability
Open Bug Bounty ID: OBB-239014 Description| Value ---|--- Affected Website:| papamurphys.1851franchise.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
christianbrothers.1851franchise.com XSS vulnerability
Open Bug Bounty ID: OBB-239010 Description| Value ---|--- Affected Website:| christianbrothers.1851franchise.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...
Hackers Steal Payment Card Data From Over 1,150 InterContinental Hotels
InterContinental Hotels Group IHG is notifying its customers that credit card numbers and other sensitive information may have been stolen after it found malware on payment card systems at 1,174 franchise hotels in the United States. It's the second data breach that U.K.-based IHG, which owns...
InterContinental Hotel Chain Breach Expands
In December 2016, KrebsOnSecurity broke the news that fraud experts at various banks were seeing a pattern suggesting a widespread credit card breach across some 5,000 hotels worldwide owned by InterContinental Hotels Group IHG. In February, IHG acknowledged a breach but said it appeared to invol...
yves-rocher-franchise.mua.hrdepartment.com XSS vulnerability
Vulnerable URL: https://yves-rocher-franchise.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
Printing and Marketing Firm Leaks High-Profile Customers' Data
Franchise Services, the parent company of a number of large print and design companies, said it is investigating claims that sensitive customer data stored by one of its franchisees is accessible online. The data dates back to 2010 and ranges from sensitive health records belonging to a former...
BBS e-Franchise 1.1.1 - Unauthenticated SQL Injection
$GET‘uid’ is not escaped, the URL is accessible for any user. You will have find a post or page that uses the plugin's shortcode. PoC...
BBS e-Franchise 1.1.1 - Unauthenticated SQL Injection
$GET‘uid’ is not escaped, the URL is accessible for any user. You will have find a post or page that uses the plugin's shortcode...
WordPress BBS e-Franchise Plugin <= 1.1.1 - SQL Injection
This plugin is prone to an SQL injection vulnerability. It allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...
WordPress Plugin BBS e-Franchise 1.1.1 - SQL Injection
Exploit Title: BBS e-Franchise 1.1.1 Plugin of WordPress – Sql Injection Date: 12/11/2016 Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/bbs-e-franchise/ Software Link: https://wordpress.org/plugins/bbs-e-franchise/ Contact: http://twitter.com/lenonleite Website:...
WordPress Plugin BBS e-Franchise 1.1.1 - SQL Injection
WordPress Plugin BBS e-Franchise 1.1.1 - SQL Injection Exploit Title: BBS e-Franchise 1.1.1 Plugin of WordPress – Sql Injection Date: 12/11/2016 Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/bbs-e-franchise/ Software Link: https://wordpress.org/plugins/bbs-e-franchise...
Wendy's Comes Clean On Data Breach
Fast-food chain Wendy’s disclosed it was a victim of a point-of-sale system attack that installed malware on PoS computers affecting 300 franchise restaurants. The disclosure was part the company’s first quarter 2016 SEC filings on Wednesday and is the most complete account to date of a 2015 data...
observatoiredelafranchise.fr XSS vulnerability
Vulnerable URL: http://www.observatoiredelafranchise.fr/creation-entreprise/moteur-recherche.htm?motRech=%22--%3E+%3C%2Fscript%3E%3Csvg%2Fonload%3D%27%3Balert%28%2FXSSPOSED%2F%29%3B%27%3E&enseigneMd=Choisir+une+enseigne Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check...
WebConnection / Toto / Tides Cross Site Scripting
Exploit Title : WebConnection Cross-Site Scripting Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.webconnection.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Site...