maist.jp XSS vulnerability

Open Bug Bounty ID: OBB-613820 Description| Value ---|--- Affected Website:| maist.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

gearth.de XSS vulnerability

Open Bug Bounty ID: OBB-610203 Description| Value ---|--- Affected Website:| gearth.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wald-laeufer.de XSS vulnerability

Open Bug Bounty ID: OBB-599418 Description| Value ---|--- Affected Website:| wald-laeufer.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Carbon Black Given 5-Star Rating in CRN’s 2018 Partner Program Guide

We are proud to announce that CRN®, a brand of The Channel Company, has given Carbon Black a 5-Star rating in its 2018 Partner Program Guide. According to CRN, this annual guide is the definitive listing of partner programs from technology vendors that provide products and services through the IT...

Mail.ru: Partner Account Takeover on https://www.delivery-club.ru через пользовательский аккаунт.

Improper access control allowed user account to perform privileged actions for partner's account with same ID. Ситуация аналогичная с 324230, но в другую сторону. Можно захватывать партнерские аккаунты посредством сессии с основного сайта...

Walmart Jewelry Partner Exposes Personal Data Of 1.3M Customers

A misconfigured Amazon S3 Simple Storage Service bucket, managed by a Walmart jewelry partner, left personal details and contact information of 1.3 million customers exposed to the public internet. The S3 repository containing a MSSQL database backup belongs to MBM Company, a Chicago, Ill.-based...

Walmart Jewelry Partner Exposes Data of Millions of Customers

By Waqas Unsecured Amazon S3 Bucket Claims Another Victim - This Time, This is a post from HackRead.com Read the original post: Walmart Jewelry Partner Exposes Data of Millions of Customers...

Mail.ru: Account Takeover on https://www.delivery-club.ru через партнерский аккаунт.

Improper access control allowed partner account to perform privileged actions for user's account with same ID. Некорректная проверки сессии...

Issue: Unable to map the network drive via SDWAN from Windows 10 Clients

Symptoms: – Below Errors might be seen when Client at Branch office tries to map the Network Drives from Win 10 machines. Errors: – SMB3 acceleration is disabled/unsupported on the partner unit – Signed Session. Reason: Secure Connection to the peer unit does not exist. To configure secure partne...

politycki-partner.de XSS vulnerability

Open Bug Bounty ID: OBB-571186 Description| Value ---|--- Affected Website:| politycki-partner.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Analysis: ROKRAT Malware

ROKRAT also referred to as DOGcall is a family of malware that has been used by attackers originating from North Korea. The family continues to evolve and adopt techniques from other families also used by the same attack group. The ROKRAT core payload is typically deployed by a loader, which has...

partner-formation.fr XSS vulnerability

Open Bug Bounty ID: OBB-568140 Description| Value ---|--- Affected Website:| partner-formation.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Enterprise Networking Operating System (ENOS) Authentication Bypass in Lenovo and IBM RackSwitch and BladeCenter Products - US

Lenovo Security Advisory: LEN-16095 Potential Impact: An attacker could gain access to the switch management interface, permitting settings changes that could result in exposing traffic passing through the switch, subtle malfunctions in the attached infrastructure, and partial or complete denial ...

Micheal McCollough Recognized as 2018 CRN® Channel Chief

This week, Micheal McCollough, Vice President, Global Channels, of Akamai was recognized and named as 2018 Channel Chief by CRN®, a brand of The Channel Company. The executives on this annual list represent top leaders in the IT channel who excel at driving growth and revenue in their organizatio...

Stolen security logos used to falsely endorse PUPs

To gain the trust of users, many websites and companies feature the logos of reputable firms who endorse their products. Unfortunately, some unseemly companies do the same, using logos of companies who have not, in fact, endorsed their product in order to trick people into thinking that what they...

kino-zeit.de XSS vulnerability

Open Bug Bounty ID: OBB-549121 Description| Value ---|--- Affected Website:| kino-zeit.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Carbon Black To Work Hand-In-Hand to Drive Partner Demand Through Cb ThreatSight

This week, Carbon Black launched Cb ThreatSight, a brand new managed threat hunting service staffed by world-class threat experts who keep watch over customer environments 24×7. As part of the new service, Carbon Black’s internal Cb ThreatSight team performs round-the-clock threat validation,...

telephonebetting.net XSS vulnerability

Open Bug Bounty ID: OBB-462720 Description| Value ---|--- Affected Website:| telephonebetting.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Shopify: Ability to bypass partner email confirmation to take over any store given an employee email

I told Pete I would take a look at Spotify, hi Pete. Summary It's possible to take over any store account through partners given an employee email address. This is possible because I found a way to confirm arbitrary emails. I don't know the Shopify ecosystem well enough to know the other...

partner-de.msi.com XSS vulnerability

Open Bug Bounty ID: OBB-452365 Description| Value ---|--- Affected Website:| partner-de.msi.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...