lastminute-reisen.tips Cross Site Scripting vulnerability OBB-2439573

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

last-minute-flughafen.de Cross Site Scripting vulnerability OBB-2367321

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

COVID-Related Threats, PowerShell Attacks Lead Malware Surge

Surging numbers of COVID-themed attacks, PowerShell trojans, along with the SolarWinds compromise and the continued spread of Sunburst malware were major contributors to a massive spike in the number of observed attacks in the wild during the last half of 2020, which McAfee’s said averaged 588...

Denial of Service Vulnerability in 7 Minute Movement App

7 Minute Exercise App is an exercise and fitness software. A denial of service vulnerability exists in 7 Minute Exercise APP. An attacker can exploit the vulnerability to cause the app to crash...

@pho-nomenal/5-minute-github-demo (>=6.0.3, <=21.5.1), eject-media (>=0.0.1, <=0.0.2) +2 more potentially affected by CVE-2020-7628 via umount (1.1.6)

umount NPM version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on umount and may be impacted: - @pho-nomenal/5-minute-github-demo =6.0.3, =0.0.1, =0.1.1, =1.1.0, =1.1.4 Source cves: CVE-2020-7628 Source advisory: OSV:GHSA-6Q48-VJQ2-MWCJ...

CVE-2020-10714

A flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with a session ID in the URL, an attacker could perform a session fixation attack. The highest threat from this vulnerability is to data confidentiality and integrity as well as...

QRadar Community Edition 7.3.1.6 PHP Object Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ PHP object injection vulnerability in QRadar Forensics web application ------------------------------------------------------------------------ Abstract...

last-minute-flughafen.de XSS vulnerability

Open Bug Bounty ID: OBB-569167 Description| Value ---|--- Affected Website:| last-minute-flughafen.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tajska.com XSS vulnerability

Open Bug Bounty ID: OBB-539592 Description| Value ---|--- Affected Website:| tajska.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Malvertising Campaign Redirects Browsers To Terror Exploit Kit

Security experts are warning some “Quit Smoking” and “20 Minute Fat Loss” ads online are delivering more than sales pitches. According to researchers at Zscaler, ads are redirecting browsers to malicious landing pages hosting the Terror exploit kit. The campaigns have been sustained, with the...

lastminute.com.au XSS vulnerability

Vulnerable URL: https://www.lastminute.com.au/m/trips/2345" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 61685 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability...

IRS Warns of Last-Minute Tax Scams

The Internal Revenue Service IRS has released an alert warning of phishing email scams targeting last-minute tax filers. The alert describes common features of these cyber crimes and includes recommendations to protect against them: strengthen passwords, recognize phishing attempts, and forward...

February 2017 security update release

UPDATE: 2/15/17: We will deliver updates as part of the planned March Update Tuesday, March 14, 2017. Our top priority is to provide the best possible experience for customers in maintaining and protecting their systems. This month, we discovered a last minute issue that could impact some custome...

first-minute.invia.cz XSS vulnerability

Vulnerable URL: http://first-minute.invia.cz/?dstartfrom=24.04.2016endto=%27%3E%3Cimg%20src=x%20onerror=alert%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status...

7 Minute Workout - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 7 Minute Workout published at the 'play' market has multiple vulnerabilities...

7 Minute Workout - Free - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application 7 Minute Workout - Free published at the 'play' market has multiple vulnerabilities...

7 Minute Workout - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application 7 Minute Workout published at the 'play' market has multiple vulnerabilities...

lastminuteauctionbargains.com XSS vulnerability

Vulnerable URL: http://www.lastminuteauctionbargains.com/index.php?searchAction=search=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22111343 Google Pagerank| 2 VIP website...

D-Link cloud routing memory vulnerability: hack 1 minute break or leakage of online banking passwords-vulnerability warning-the black bar safety net

D-Link cloud routing memory the vulnerability may leak password Relates to 1 of 7 models; the Friends of the news group in English official website released four of the model number Router the patch, but there is no Chinese version of the Beijing news news recently, the domestic security experts...

Pay Per Minute Video Chat Script 2.0 & 2.1 - Multiple Vulnerabilities

No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: suffer from multi XSS Vulnerability Vendor: payperviewvideosoftware.com ? Software : Pay Per Minute Video Chat Script V 2.1 - pR!CE : $269.00 USD. ? author: R3d-D3v!L ?...