brasilparkshopping.com.br Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1007136 Security Researcher Faizanmark Helped patch 77 vulnerabilities Received 6 Coordinated Disclosure badges Received 58 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting brasilparkshopping.com.br...

Friday Squid Blogging: Triassic Kraken

Research paper: "Triassic Kraken: The Berlin Ichthyosaur Death Assemblage Interpreted as a Giant Cephalopod Midden": Abstract: The Luning Formation at Berlin Ichthyosaur State Park, Nevada, hosts a puzzling assemblage of at least 9 huge ≤14 m juxtaposed ichthyosaurs Shonisaurus popularis...

MyPayrollHR CEO Arrested, Admits to $70M Fraud

Earlier this month, employees at more than 1,000 companies saw one or two paycheck's worth of funds deducted from their bank accounts after the CEO of their cloud payroll provider absconded with $35 million in payroll and tax deposits from customers. On Monday, the CEO was arrested and allegedly...

van-elk-tuin-en-park-bv.hondagroendealers.nl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-935498 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

U.S. Government Goes After North Korea's Joanap Botnet

The U.S. Justice Department is looking to retaliate against North Korea-linked hackers who have built up a massive global network of infected computers. The department announced on Wednesday that it would seek to map out the Joanap botnet, which has been built and controlled by North Korea-linked...

The world’s southernmost security conference

When asked about his best race, Ayrton Senna replied that it was when he raced karting cars. For him it was the best because it was only for the sake of sports and free from commercial sponsoring and commercial interests. I have this same feeling about computer security conferences, because they...

unionparkacademy.org XSS vulnerability

Open Bug Bounty ID: OBB-715358 Description| Value ---|--- Affected Website:| unionparkacademy.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Linux Kernel 4.8 (Ubuntu 16.04) - Leak sctp Kernel Pointer

Linux Kernel 4.8 Ubuntu 16.04 - Leak sctp Kernel Pointer / Exploit Title: Linux Kernel 4.8 Ubuntu 16.04 - Leak sctp kernel pointer Google Dork: - Date: 2018-11-20 Exploit Author: Jinbum Park Vendor Homepage: - Software Link: - Version: Linux Kernel 4.8 Ubuntu 16.04 Tested on: 4.8.0-36-generic...

inazawa-cci.or.jp XSS vulnerability

Open Bug Bounty ID: OBB-682720 Description| Value ---|--- Affected Website:| inazawa-cci.or.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

brasilparkshopping.com.br XSS vulnerability

Open Bug Bounty ID: OBB-680212 Description| Value ---|--- Affected Website:| brasilparkshopping.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

realtyhop.com XSS vulnerability

Open Bug Bounty ID: OBB-675388 Description| Value ---|--- Affected Website:| realtyhop.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

U.S. Charges North Korean Spy Over WannaCry and Sony Pictures Hack

The U.S. Department of Justice announces criminal charges against a North Korean government spy in connection with the 2017 global WannaCry ransomware attack and the 2014 Sony Pictures Entertainment hack. According to multiple government officials cited by the NY Times who are familiar with the...

U.S. Charges North Korean Spy Over WannaCry and Sony Pictures Hack

The U.S. Department of Justice announces criminal charges against a North Korean government spy in connection with the 2017 global WannaCry ransomware attack and the 2014 Sony Pictures Entertainment hack. According to multiple government officials cited by the NY Times who are familiar with the...

parkshoppingbarigui.com.br XSS vulnerability

Open Bug Bounty ID: OBB-668051 Description| Value ---|--- Affected Website:| parkshoppingbarigui.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

parkshoppingsaocaetano.com.br XSS vulnerability

Open Bug Bounty ID: OBB-667968 Description| Value ---|--- Affected Website:| parkshoppingsaocaetano.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Woman charged for hacking & leaking private pictures of Selena Gomez

By Carolina Selena Gomez, a well-known celebrity pop star, is in the news for getting her email hacked that led to the exposure of her personal pictures on the internet. A 21-year old female has been arrested and charged for performing the hacking of Gomez’ email. Susan Atrach from Ridgefield Par...

21-Year-Old Woman Charged With Hacking Selena Gomez's Email Account

A 21-year-old New Jersey woman has been charged with hacking into the email accounts of pop star and actress Selena Gomez, stealing her personal photos, and then leaked them to the Internet. Susan Atrach of Ridgefield Park was charged Thursday with 11 felony counts—five counts of identity theft,...

Integer overflow

The mintToken function of a smart contract implementation for South Park Token Token SPTKN, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13503

The CVE-2018-13503 entry concerns South Park Token Token (SPTKN), an Ethereum token. The vulnerability is in the mintToken function of the smart contract, described as an integer overflow that allows the contract owner to set any user’s balance to an arbitrary value. This directly enables manipul...

travelcar.com XSS vulnerability

Open Bug Bounty ID: OBB-638468 Description| Value ---|--- Affected Website:| travelcar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...