Valve Patches Password Reset Vulnerability in Steam

Valve Software has reportedly patched a vulnerability in the popular online Steam gaming platform that enabled account hijacking through its password reset mechanism. Kotaku, a popular blog among gamers, said that a number of prominent Steam accounts and Twitch streamers were stolen or accessed...

kotaku.com XSS vulnerability

Vulnerable URL: http://kotaku.com/tag/lego-dimensions-might-have-little-too-much-fan-service-1716669229%22%3C%2FsCripT%3E%3CsCripT%3Eprompt'XSSPOSED'%3C%2FsCripT%3E Details: Description| Value ---|--- Patched:| Yes, at 30.07.2015 Latest check for patch:| 30.07.2015 04:53 GMT Vulnerability type:|...

Gawker Local File Inclusion

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Thought I'd share this...found an LFI on gawker which is on the same server as Kotaku and other sites part of their 'network' http://kotaku.com/assets/minify.php?fsid=dfdsf&type=sads&sb=../../.. /../../../../../../../etc/passwd%00 ^ works for gawker a...