travel.southwest.com XSS vulnerability

Vulnerable URL:...

joboffers.mitula.co.uk XSS vulnerability

Vulnerable URL: https://joboffers.mitula.co.uk/searchJ/q-hola%22'--!%3E%3CImage%20SrcSet=K%20OnError=confirm'OPENBUGBOUNTY'%3E/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

offers-on-holidays.co.uk Open Redirect vulnerability

Open Bug Bounty ID: OBB-276015 Description| Value ---|--- Affected Website:| offers-on-holidays.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

PHDays VII: To Vulnerability Database and beyond

Last Tuesday and Wednesday, May 23-24, I attended PHDays VII conference in Moscow. I was talking there about vulnerability databases and the evolution process of vulnerability assessment tools, as far as I understand it. But first of all, a few words about the conference itself. I can tell that...

travel.southwest.com XSS vulnerability

Vulnerable URL: http://travel.southwest.com/specialoffers/topOffers.html?airCheckbox=1=DOLLARS"--!"=350=21000&carCheckbox=1=400&hotelCheckbox=1&vacationCheckbox=1&cruiseCheckbox=1&activityCheckbox=1=Pittsburgh-PIT=Chicago%28Midway%29-MDWbutton=Go Details: Description| Value ---|--- Patched:| No...

SIM Info/USSD/Recharge Offers - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SIM Info/USSD/Recharge Offers published at the 'play' market has multiple vulnerabilities...

travel.southwest.com XSS vulnerability

Vulnerable URL:...

bemidjipioneer.com XSS vulnerability

Vulnerable URL: http://www.bemidjipioneer.com/marketplaceoffers/category/Home%20Improvement%3Cimg%20src=x%20onerror=alert%28'XSSPOSED'%29%3E/ Details: Description| Value ---|--- Patched:| Yes, at 27.03.2016 Latest check for patch:| 27.03.2016 22:26 GMT Vulnerability type:| XSS Vulnerability...

DEBIAN-CVE-2015-1558

Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service file descriptor consumption via an SDP offer containing only incompatible codecs...

Debian Security Advisory DSA 2960-1 (icedove - security update)

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client: multiple memory safety errors and buffer overflows may lead to the execution of arbitrary code or denial of service. OpenVAS Vulnerability Test $Id: deb2960.nasl 6724 2017-07-14...

Apple Starts iBeacon Tracking System in Stores

If you’re still wondering when the future will get here, stop looking to the skies for flying cars and look down at your iPhone the next time you walk into an Apple store. The company has just kicked off a new in-store tracking initiative that uses Bluetooth to push offers and notifications to...

Palestinian hacker, who hacked Zuckerberg’s Facebook account to be rewarded with $12,000

The Palestinian hacker 'Khalil Shreateh', who broke into the Mark Zuckerberg's Facebook Timeline to expose a security lapse will be awarded nearly $12,000 but not from Facebook, it will come from an online crowdsourced campaign. The hacker initially used Facebook's whitehat disclosure program, a...

Scammers Exploit Apple iPhone Release with Accessory Offers

With the release event for Apple’s newest iPhone model going on, quite literally, as I type, it comes as no surprise that scammers are exploiting the vast anticipation for the iPhone 5. In fact, so wide is the interest in Apple’s unreleased products that among the first iPhone 5 mass spam campaig...

New P2P Zeus Variant Targets Popular Sites with Bogus Offers

Facebook, Gmail, Yahoo and Hotmail users should beware of rogue rebate offers and new secure payment options aimed at getting them to part with their debit card information. Earlier this week Amit Klein, CTO of Trusteer, announced the discovery of a peer-to-peer variant of the Zeus platform that...

Groupon Piggyback Site Offers $500 Voucher, Charges Users for Allegedly 'Free' Trial Offers

A domain registered two days ago as groupon500.com, which claims to offer a $500 voucher toward Groupon or its primary competitor, LivingSocial, is actually registering users for ‘free’ trial offers that aren’t free at all. The best part, however, is that everything about this scam is perfectly...

Scammers Borrow Facebook 'Likes' From Top Sites To Promote Scams

Call it a new twist on Facebook “Like” jacking. Researchers at the firm Zscaler say that scammers are embedding Facebook “Like” widgets from top ranked Web brands and in Web pages used to promote online scams or distribute malware. The widgets make it appear as if tens- or hundreds of thousands o...

Launching AnonLeaks, Ready To Dump More HBGary E-mails !

Anonymous used to be all about disrupting the Web sites of companies that helped block WikiLeaks' funding. Now it's starting to act like WikiLeaks itself. The group is planning, as early as today, to release 27,000 e-mails from the server of Greg Hoglund, the chief executive of software security...

Maruti CEO's email hacked, two Nigerians detained for hacking !

The Gurgaon badge accept bedfast two Nigerians for hacking into the email of auto above Maruti Suzuki's managing administrator and arch controlling administrator CEO Shinzo Nakanishi and sending affected job offers to aspirants. According to sources, the badge accept asked the suspects to accoute...

Beware Of Phishing Scams, Vishing, And Other Smishing !

Better Business Bureau has published a list of top 10 scam that seems not only to the biggest scam in 2010, but what to watch in 2011. In no particular order, here they are: Door to door scams Each of the new season of the show to attract new scammer port provides an incredible offer: Roofing in...

Hacker Bid : Indianhaxors.com Domain for Sale !

Hacker Bid : Indianhaxors.com Domain for Sale ! Hello Hackers, One of mine friend having a very popular keyword and impressive Domain name - www.indianhaxors.com . He has no time to manage the site, so finally he decide to sell this domain + lots of other Promotional Offers. Domain Offer : 1. Ful...