60 matches found
noblefertilitycenter.com Cross Site Scripting vulnerability OBB-2300708
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Kmart, Latest Victim of Egregor Ransomware – Report
Retail stalwart Kmart has suffered a ransomware attack at the hands of the Egregor gang, according to a report. The incident has encrypted devices and servers connected to the company’s networks, knocking out back-end services, according to BleepingComputer. The outlet obtained the purported rans...
Egregor Claims Responsibility for Barnes & Noble Attack, Leaks Data
The Egregor ransomware gang has reportedly taken responsibility for the Barnes & Noble cyberattack, first disclosed on Oct. 15. The bookseller warned last week that it had been hacked in emailed notices to customers, noting that a cyberattack happened on Oct. 10, “which resulted in unauthorized a...
News Wrap: Barnes & Noble Hack, DDoS Extortion Threats and More
The Threatpost editors break down the top security stories of the week ended Oct. 16, including: Patch Tuesday insanity, with Microsoft and Adobe releasing fixes for severe vulnerabilities – including a critical, potentially wormable remote code execution bug known as the “Ping of Death” Barnes a...
Barnes & Noble Hack: A Reading List for Phishers and Crooks
UPDATE Barnes & Noble is warning that it has been hacked, potentially exposing personal data for shoppers – and offering phishers an early holiday gift. The book purveyor sent out emailed notices to customers very late Wednesday night and in the wee hours of Thursday morning, warning that a...
stores.barnesandnoble.com Cross Site Scripting vulnerability OBB-1271184
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Node.js third-party modules: Prototype Pollution Vulnerability in noble Package
I would like to report prototype pollution vulnerability in noble. It allows attackers to pollute the Object.prototype object of an application running noble, possibly through Bluetooth. Module module name: noble version: 1.9.1 npm page: https://www.npmjs.com/package/noble Module Description A...
customer.barnesandnoble.com XSS vulnerability
Open Bug Bounty ID: OBB-606590 Description| Value ---|--- Affected Website:| customer.barnesandnoble.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
noble-caledonia.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-553800 Description| Value ---|--- Affected Website:| noble-caledonia.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
noble-cars.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-500227 Description| Value ---|--- Affected Website:| noble-cars.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...
noble-cars.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-455691 Description| Value ---|--- Affected Website:| noble-cars.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
bookclubs.barnesandnoble.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-455102 Description| Value ---|--- Affected Website:| bookclubs.barnesandnoble.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat...
noble-cars.co.uk XSS vulnerability
Vulnerable URL: http://www.noble-cars.co.uk/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...
GATTacker - BLE (Bluetooth Low Energy) Man-in-the-Middle
A Node.js package for BLE Bluetooth Low Energy security assessment using Man-in-the-Middle and other attacks. Prerequisites see: https://github.com/sandeepmistry/noble https://github.com/sandeepmistry/bleno Install npm install gattacker Usage Configure Running both components Set up variables in...
Islam: The Noble Quran - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Islam: The Noble Quran published at the 'play' market has multiple vulnerabilities...
Barnes and Noble Mobile Device Model Detection
Binary data 6078.prm...
CVE-2014-7037
The Noble Sticker "FREE" aka com.kuronecostudio.kizokustamp.free application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7037
The CVE-2014-7037 entry concerns the Android app “Noble Sticker FREE” (com.kuronecostudio.kizokustamp.free), version 1.0.7, which does not verify X.509 certificates from SSL servers. This lack of certificate validation enables man‑in‑the‑middle attackers to spoof servers and obtain sensitive info...
Point-of-Sale Terminals Compromised at 63 Barnes & Noble Locations
UPDATE – America’s largest book retailer, Barnes & Noble, announced this morning it has detected evidence of tampering in 63 PIN-pad devices used in as many stores by criminals trying to steal payment card information. Barnes & Noble claims to have disconnected all the affected devices from servi...
Hackers stole Credit Card details from 63 'Barnes & Noble' stores
Over 60 Barnes & Noble stores have been used by hackers to gain the credit card data, including the PINs, of customers. The New York company is warning customers to check for unauthorized transactions and to change their personal identification numbers or PINs. It hasn't said how many accounts ma...