Black Hat USA 2020: Critical Meetup.com Flaws Reveal Common AppSec Holes

Critical flaws in the popular Meetup platform were revealed Monday as part of research unleashed at this week’s Black Hat USA 2020. The flaws, which have been patched, enable the full takeover of Meetup “Groups” by threat actors, who can also redirects payments and carryout other malicious action...

meetup.com XSS vulnerability

Vulnerable URL: https://www.meetup.com/topics/support-group/us/tx/mckinney/?allMeetups=true=us=true"-confirmOPENBUGBOUNTY-"==mckinney==tx==default|96=7=Infinitymobile=on=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.08.2017 Vulnerability type:| XSS Vulnerability...

secure.meetup.com XSS vulnerability

Vulnerable URL: https://secure.meetup.com/login/?apiAppName=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Che...

meetup.com XSS vulnerability

Vulnerable URL: http://www.meetup.com/account/forgot/?keyword=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%3Cimg/onerror=%27;alert%28/XSSPOSED/%29;%27src=1%3E Details: Description| Value ---|--- Patched:| Yes, at 27.03.2016 Latest check for patch:| 27.03.2016 01:22 GMT Vulnerability type:| XS...

Meetup.com Back Online After DDoS Attacks, Extortion

Social networking site Meetup.com is finally back online today, yet officials at the site are warning it could still face future outages following a series of sustained distributed denial of service attacks DDoS over the weekend. Meetup is a social networking portal that allows individuals with...