Malicious code in @nationalgeographicsociety/ngsui-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d937ed5f0de34fc1491db77a6b046ff477eb03286b9c49541ae1250170651eb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2794 Malicious code in @nationalgeographicsociety/ngsui-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2e0774a528586e00ee067cc42c7701529d5ea60809590ae156b473dffb95b4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Friday Squid Blogging: On Squid Brains

Interesting National Geographic article. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...

Friday Squid Blogging: Shark vs. Squid

National Geographic has a photo of a 7-foot long shark that fought a giant squid and lived to tell the tale. Or, at least, lived to show off the suction marks on his skin. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blo...

books.nationalgeographic.com Open Redirect vulnerability

Vulnerable URL: http://books.nationalgeographic.com/ngm/0408/zoomify/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa...

shop.nationalgeographic.com XSS vulnerability

Open Bug Bounty ID: OBB-322235 Description| Value ---|--- Affected Website:| shop.nationalgeographic.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

earthpulse.nationalgeographic.com XSS vulnerability

Open Bug Bounty ID: OBB-286244 Description| Value ---|--- Affected Website:| earthpulse.nationalgeographic.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6...

shop.nationalgeographic.com XSS vulnerability

Vulnerable URL: https://shop.nationalgeographic.com/browse/productDetailWithPicker.jsp?productId=2000997%22-confirm/openbugbounty/-%22 Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 15:38 GMT Vulnerability type:| XSS Vulnerability status:|...

sso.leaderboard.nationalgeographic.com XSS vulnerability

Open Bug Bounty ID: OBB-203620 Description| Value ---|--- Affected Website:| sso.leaderboard.nationalgeographic.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

shop.nationalgeographic.com XSS vulnerability

Vulnerable URL: http://shop.nationalgeographic.com/ngs/browse/productDetail.jsp?npd=1074243998347";alert'XSSPOSED';a="a Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

books.nationalgeographic.com XSS vulnerability

Vulnerable URL: http://books.nationalgeographic.com/ngm/0412/feature5/zoomify/flashdetection.swf?flashContentURL=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

ngm.nationalgeographic.com XSS vulnerability

Vulnerable URL: http://ngm.nationalgeographic.com/ngm/0408/zoomify/flashdetection.swf?flashContentURL=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

alliances.nationalgeographic.com XSS vulnerability

Open Bug Bounty ID: OBB-107880 Description| Value ---|--- Affected Website:| alliances.nationalgeographic.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6....

shop.nationalgeographic.com XSS vulnerability

Vulnerable URL: https://shop.nationalgeographic.com/ngs/myaccount/profile.jsp?newUser=true&requestid=9540899 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

video.nationalgeographic.com XSS vulnerability

Vulnerable URL: http://video.nationalgeographic.com/search?q=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 19.12.2016 Latest check for patch:| 19.12.2016 10:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

Theregister.co.uk , Vodafone, Telegraph, Acer, National Geographic got hacked by Turkguvenligi

Theregister.co.uk , Vodafone, Telegraph, Acer, National Geographic got hacked by Turkguvenligi The Register One of the Biggest British technology news and opinion website got hacked by Turkguvenligi . Not only this Vodafone, Telegraph, Acer, National Geographic, Ups.com , betfair.com also got...