39 matches found
healthwatchnorthyorkshire.co.uk Cross Site Scripting vulnerability OBB-1206791
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
derbyshirelife.co.uk Cross Site Scripting vulnerability OBB-1200303
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
F5 Networks BIG-IP : BIG-IP crypto driver vulnerability (K43815022)
The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.5.1 / 14.1.2.4 / 15.1.0. It is, therefore, affected by a vulnerability as referenced in the K43815022 advisory. Under certain conditions, the Intel QuickAssist Technology QAT cryptography driver may produce a Traffic...
New Facebook ad reporting tool launches in UK
Last year, well-known consumer advice expert Martin Lewis decided to take Facebook to court for defamation. The cause? Multiple bogus adverts placed on the social network featuring his likeness, appearing via the ad network Outbrain. As a trusted face in consumer causes, scammers bolting Lewis'...
m.johnlewis.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-360004 Description| Value ---|--- Affected Website:| m.johnlewis.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...
lewisandclarkfoundation.org XSS vulnerability
Vulnerable URL: http://www.lewisandclarkfoundation.org/print.php?refpage=events.php?id=119"';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18148777 VIP website status:| No Chec...
johnlewis.com XSS vulnerability
Vulnerable URL: https://www.johnlewis.com/browse/electricals/televisions/all-tvs/4k-ultra-hd//N-6srfZ1z0heuk/"'--! Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 19:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...
johnlewis.com XSS vulnerability
Vulnerable URL: https://www.johnlewis.com/brand/reg-ruby//N-1z13nhi/"'--! Details: Description| Value ---|--- Patched:| Yes, at 01.11.2017 Latest check for patch:| 01.11.2017 10:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4613 VIP website status:| Yes...
johnlewis.com XSS vulnerability
Vulnerable URL: https://www.johnlewis.com/browse/men/mens-polo-shirts-rugby-shirts/rugby-shirts//N-eaeZ1z0rhp0//%22%3E%3Cimg%20src=x%20%20onerror=prompt%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:07 GMT Vulnerabili...
johnlewis.com XSS vulnerability
Vulnerable URL: http://www.johnlewis.com/browse/men/mens-coats-jackets/denim-supply-ralph-lauren/windbreaker//N-ea9Z1z0owx4Z1z0rl37//%22%3E%3Csvg/onload=alert%28'OPENBUGBOUNTY'%29;%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 14:59 GMT...
catalog.fortlewis.edu XSS vulnerability
Vulnerable URL: http://catalog.fortlewis.edu/portfolionopop.php/"--!" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description|...
All Vulnerabilities for jb.man.ac.uk Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| jb.man.ac.uk ---|--- Open Bug Bounty...
All Vulnerabilities for itv.com Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| itv.com ---|--- Open Bug Bounty Program...
johnlewis.com XSS vulnerability
Vulnerable URL: http://www.johnlewis.com/search?Ntt=x"%3Cbody%2fonpageshow%3D%28prompt%29%28%2fXSSPOSED%2f%29%3B%2f%2f=1&requestid=364364 Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 07:40 GMT Vulnerability type:| XSS Vulnerability status:|...
Kryogeniks Indicted for Comcast Hack
Three alleged members of the hacker gang Kryogeniks were hit with a federal conspiracy charge for a 2008 stunt that replaced Comcast’s homepage with a shout-out to other hackers. Prosecutors identified Christopher Allen Lewis, 19, and James Robert Black Jr., 20, as the hackers “EBK” and “Defiant,...
Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : subversion vulnerability (USN-812-1)
Matt Lewis discovered that Subversion did not properly sanitize its input when processing svndiff streams, leading to various integer and heap overflows. If a user or automated system processed crafted input, a remote attacker could cause a denial of service or potentially execute arbitrary code ...
GLSA-200504-26 : Convert-UUlib: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200504-26 Convert-UUlib: Buffer overflow A vulnerability has been reported in Convert-UUlib where a malformed parameter can be provided by an attacker allowing a read operation to overflow a buffer. The vendor credits Mark Martine...
Andrew Lewis
The Problem: ------------ Many admins who use Proxy+ configure the remote administration port which works over HTTP to only accept connections from the localhost. Fortunately enough, the admin port doesn't allow connections which have been bounced through the HTTP proxy. The telnet proxy, on the...
MDMA Advisory #5: Reading of CGI Scripts under Savant Webserver
MDMA Advisory 5 by Andrew Lewis aka. Wizdumb Reading of CGI Scripts under Savant Webserver It is possible to view the source of CGI scripts running under the Savant Webserver by omitting the HTTP version from your request. For example, we connect to port 80 of the server and type "GET...