islamic-relief.org.uk Improper Access Control vulnerability OBB-1303192

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

islamicresorts.com Cross Site Scripting vulnerability OBB-1207000

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

maqraa.islamacademy.net Cross Site Scripting vulnerability OBB-1192229

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

islamiccouncilwa.com.au Open Redirect vulnerability

Open Bug Bounty ID: OBB-1145578 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting islamiccouncilwa.com.au website and its users...

China's Border Guards Secretly Installing Spyware App on Tourists' Phones

Chinese authorities are secretly installing surveillance apps on smartphones of foreigners at border crossings in the Xinjiang region who are entering from neighboring Kyrgyzstan, an international investigation revealed. Xinjiang XUAR is an autonomous territory and home to many Muslim ethnic...

m.islamicbulletin.org XSS vulnerability

Open Bug Bounty ID: OBB-642337 Description| Value ---|--- Affected Website:| m.islamicbulletin.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

International Islamic University Chittagong: Admin access on http://119.18.148.140/iiuc/ through leaked credentials

The researcher was able to access admin panel using admin credential that leaked as a plain text through error message...

International Islamic University Chittagong: Improper error handler

during the analysis it was found that when we submit the form and try to upload a txt file then it show a error page with internal path disclosure...

International Islamic University Chittagong: #2 Full Path Disclosure on http://119.18.148.140/iiuc/login/logining

This researcher able to bypass our fix on full path disclosure on login page...

International Islamic University Chittagong: SQL injection in http://119.18.148.140/hrd/js/makeemployeeid.php

Hello, The mentioned page takes at least two GET parameters, namely q and departmentname. The two parameters are vulnerable to SQL injection as both are placed into SQL query strings without proper sanitization. It seems like the PHP script uses the affected parameters into two SQL queries, since...

International Islamic University Chittagong: Default credentials on http://119.18.148.140/hrd/

Hello, When the mentioned URL is opened, the user is presented with a login form that logs them into the "HR & Payroll" system of the university. The issue here is that the credentials used are the application's default credentials, which are mentioned here...

International Islamic University Chittagong: Email HTML Injection and Possible Stored Cross-Site Scripting in ieeeiiucsb.org

Hello International Islamic University Chittagong I found a Email HTML Injection in ieeeiiucsb.org Summary: add summary of the vulnerability This attack can be use to create a phishing email using your email app Steps To Reproduce: 1. Go to https://ieeeiiucsb.org/registration/ 2. Choose any event...

Jordan Islamic Bank - Certificates or keys found, Corrupted files, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Jordan Islamic Bank published at the 'play' market has multiple vulnerabilities...

لعبة الألغاز الإسلامية - Corrupted files, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application لعبة الألغاز الإسلامية published at the 'play' market has multiple vulnerabilities...

Islamic questions - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Islamic questions published at the 'play' market has multiple vulnerabilities...

Iranians Indicted Over DDoS Campaign on Banks, Dam Hack

The U.S. government on Thursday indicted seven hackers affiliated with the Iranian government for attacks it called “a frightening new frontier in cybercrime.” Accusing the men of carrying out a series of distributed denial of service DDoS attacks against 46 financial companies, the Department of...

Lt Gen David Deptula on Desert Storm and Islamic State

This weekend Vago Muradian interviewed Lt Gen ret David Deptula, most famous for his involvement as a key planner for the Desert Storm air campaign. I recommend watching the entire video, which is less than 8 minutes long. Three aspects caught my attention. I will share them here. First, Lt Gen...

islamicdawah.co.uk XSS vulnerability

Vulnerable URL: http://islamicdawah.co.uk/sunQiblah.php?lang=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

islamicdawah.co.uk XSS vulnerability

Vulnerable URL: http://islamicdawah.co.uk/prayerDetail.php?country=ghana=Edu=7940〈=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

#ParisAttacks — Anonymous declares War on ISIS: 'We will Hunt you Down!'

Following the bloody terror attacks in Paris where over 130 people were killed, the hacktivist collective Anonymous has declared total war against the Islamic State IS, formerly ISIS/ISIL. Anonymous released a video message, posted in French, on YouTube Sunday announcing the beginning of OpParis,...