highlandholidaycottages.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-663706 Description| Value ---|--- Affected Website:| highlandholidaycottages.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Securing Mobile Devices During Summer Travel

As summer begins, many people will travel with their mobile devices. Although these devices—such as smart phones, tablets, and laptops—offer a range of conveniences, users should be mindful of potential threats and vulnerabilities while traveling with them. NCCIC encourages users to review the...

New State of Online Retail Performance Report Available

It's springtime, and the only people with the holidays on their minds are in the retail business. This holiday season was a record-breaking one, with combined revenue for Black Friday and Cyber Monday alone exceeding $11.5 billion. To build on that momentum, smart retailers will take a closer loo...

CVE-2017-9838

Dolibarr ERP/CRM is affected by multiple reflected Cross-Site Scripting XSS vulnerabilities in versions before 5.0.4: index.php leftmenu parameter, core/ajax/box.php PATHINFO, product/stats/card.php type parameter, holiday/list.php monthcreate, monthstart, and monthend parameters, and don/card.ph...

rezervari.holidaystore.ro XSS vulnerability

Open Bug Bounty ID: OBB-573682 Description| Value ---|--- Affected Website:| rezervari.holidaystore.ro Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

holiday-fc.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-572338 Description| Value ---|--- Affected Website:| holiday-fc.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lacaza.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-569001 Description| Value ---|--- Affected Website:| lacaza.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Biometric Shift Employee Management System Cross-Site Scripting Vulnerability

Biometric Shift Employee Management System is an employee management system. A cross-site scripting vulnerability exists in Biometric Shift Employee Management System. The vulnerability can be exploited via the index.php holidayname parameter in the editholiday operation...

Biometric Shift Employee Management System Cross-Site Request Forgery Vulnerability

Biometric Shift Employee Management System is an employee management system. A cross-site request forgery vulnerability exists in Biometric Shift Employee Management System. The vulnerability can be exploited to conduct cross-site request forgery attacks via index.php in the editholiday operation...

CVE-2017-17989

Biometric Shift Employee Management System has XSS via the index.php holidayname parameter in an editholiday action...

Design/Logic Flaw

Biometric Shift Employee Management System has XSS via the index.php holidayname parameter in an editholiday action...

CVE-2017-17990

Biometric Shift Employee Management System has CSRF via index.php in an editholiday action...

Design/Logic Flaw

Biometric Shift Employee Management System has CSRF via index.php in an editholiday action...

CVE-2017-17989

Biometric Shift Employee Management System has XSS via the index.php holidayname parameter in an editholiday action...

Buyers Beware of Tampered Gift Cards

Prepaid gift cards make popular presents and no-brainer stocking stuffers, but before you purchase one be on the lookout for signs that someone may have tampered with it. A perennial scam that picks up around the holidays involves thieves who pull back and then replace the decals that obscure the...

Security IQ:  How to Survive the Holiday Phishing Season

Now that we’ve officially entered the holiday season it’s time to be especially mindful of the ways that an attacker may use this to their advantage. In fact, recent Carbon Black data noted a 20.5% uptick in attempted cyberattacks during the holiday season. “Good” Deals If you’re looking to find...

Securing Mobile Devices During Holiday Travel

As the holiday season begins, many people will travel with their mobile devices. Although these devices—such as smart phones, tablets, and laptops—offer a range of conveniences, users should be mindful of potential threats and vulnerabilities while traveling with them. US-CERT encourages users to...

holiday-apartments-finder.com XSS vulnerability

Open Bug Bounty ID: OBB-432411 Description| Value ---|--- Affected Website:| holiday-apartments-finder.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

What to expect for this year's Black Friday and Cyber Monday

Last year during holidays, US online sales surpassed $122 billion. This represented a 12 percent increase over the previous year. But beyond the overall growth, what's more interesting is that sales at physical stores dropped by 10 percent, the result of ongoing consumer comfort with and adoption...

Holiday Season Cyberattacks May Increase By More Than 20% Starting This Week

As we approach the upcoming Thanksgiving holiday, organizations should be paying close attention to potential cyberattacks coming their way, if history offers any indication of what’s to come. According to the Carbon Black Threat Analysis Unit TAU, organizations saw a +20.5% increase in attempted...