iNSYNQ Ransom Attack Began With Phishing Email

A ransomware outbreak that hit QuickBooks cloud hosting firm iNSYNQ in mid-July appears to have started with an email phishing attack that snared an employee working in sales for the company, KrebsOnSecurity has learned. It also looks like the intruders spent roughly ten days rooting around...

Tianyi Life Jiangsu Telecom Palm Business Hall APP has multiple vulnerabilities

Tianyi Life Jiangsu Telecom Pocket Business Hall APP is a handheld service mobile software launched by Jiangsu Telecom. There are multiple vulnerabilities in Tianyi Life Jiangsu Telecom Handheld Business Office APP, which can be exploited by attackers to obtain sensitive user information...

A city in Texas is using paper after suffering ransomware attack

By Waqas Another day, another devastating ransomware attack; this time, computers at The City Hall of Del Rio, Texas have suffered a massive ransomware attack forcing authorities to completely shut down the targeted network. The attack took place on Thursday, January 10th after which the City's...

hollandhall.org XSS vulnerability

Open Bug Bounty ID: OBB-718773 Description| Value ---|--- Affected Website:| hollandhall.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

Twenty Years of Network Security Monitoring: From the AFCERT to Corelight

I am really fired up to join Corelight. I’ve had to keep my involvement with the team a secret since officially starting on July 20th. Why was I so excited about this company? Let me step backwards to help explain my present situation, and forecast the future. Twenty years ago this month I joined...

hall-fast.com XSS vulnerability

Open Bug Bounty ID: OBB-610764 Description| Value ---|--- Affected Website:| hall-fast.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hall-wattens.at XSS vulnerability

Open Bug Bounty ID: OBB-573909 Description| Value ---|--- Affected Website:| hall-wattens.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Thanks to the researchers 2018

News Thanks to the researchers 2018 Share February 13th, 2018 Every year, researchers offer us their assistance to help enhance the security of our websites. We would like to thank those who discovered and reported security issues in 2018. EDIT: The list of researchers was moved to our new site,t...

crocus-hall.ru XSS vulnerability

Open Bug Bounty ID: OBB-557212 Description| Value ---|--- Affected Website:| crocus-hall.ru Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until disclosure Disclosure Standard:| Coordinated Disclosure based on ISO 2914...

Call For Customer Presentations at RSA Conference 2018!

Tell your security story to your peers at RSA Conference 2018 San Francisco! Qualys is looking for customers excited to share their security and DevSecOps successes, best practices and case studies leveraging the use of the Qualys Cloud Platform. Take the stage in the Qualys booth to share your...

hall-virtuel.cma-morbihan.fr XSS vulnerability

Open Bug Bounty ID: OBB-429541 Description| Value ---|--- Affected Website:| hall-virtuel.cma-morbihan.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cannonhallfarm.digitickets.co.uk Open Redirect vulnerability

Vulnerable URL: https://cannonhallfarm.digitickets.co.uk/affiliates/?aid=53E20846=http://openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| N...

hall-virtuel.cma-morbihan.fr Open Redirect vulnerability

Open Bug Bounty ID: OBB-327388 Description| Value ---|--- Affected Website:| hall-virtuel.cma-morbihan.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

sandrahallphotography.com XSS vulnerability

Vulnerable URL: https://www.sandrahallphotography.com/dspProofImage.asp?width=1024=Samples%5CHorse%20Showsℑ=1"...

Vulnerability in orderid parameter of China Telecom's handheld business hall app mall order page.

China Telecom Pocket Business Office is a cell phone terminal-based application software that provides users with recharge and payment, cost inquiries and other services. There is a vulnerability in the orderid parameter of the order page of the China Telecom Palm Business Hall app, which allows ...

Outpatient lobby app has information leakage vulnerability

Outpatient Hall APP is a mobile Internet medical care platform that helps users realize a number of services, such as free consultation before consultation, triage and guidance, and booking and registration. There is an information leakage vulnerability in Outpatient Hall APP. Because the APP use...

bad-hall.ooe.gv.at XSS vulnerability

Vulnerable URL: http://www.bad-hall.ooe.gv.at/system/web/suche.aspx?search='-confirmopenbugbounty-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

Xi'an Concert Hall App Payment Logic Vulnerability

Xi'an Concert Hall Android Client is a smartphone application that provides Xi'an Concert Hall performance inquiry and ticket purchase. A payment logic vulnerability exists in the Xi'an Concert Hall app. An attacker can modify the payment amount by bypassing the bank verification mechanism by...

To learn Hall online learning system application\User\Controller\CenterController.class.php parameters state SQL injection

No description provided by source...

memorialhall.mass.edu XSS vulnerability

Vulnerable URL: http://www.memorialhall.mass.edu/turns/theme.jsp?x=11%22--%3E%3C/script%3E%3Csvg/onload=%27;alert%28/OPENBUGBOUNTY/%29;%27%3E=4 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...