How companies can prepare for a heightened threat environment

With high levels of political unrest in various parts of the world, it’s no surprise we’re also in a period of increased cyber threats. In the past, a company’s name, political affiliations, or religious affiliations might push the risk needle higher. However, in the current environment any compa...

astraqom.com Improper Access Control vulnerability

Security Researcher geeknik Helped patch 8544 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting astraqom.com website and its users. Following coordinated...

ferefoto.hu Cross Site Scripting vulnerability

Security Researcher suraj102 Helped patch 34 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting ferefoto.hu website and its users. Following coordinated and responsible vulnerability...

Critical Windows Vulnerability Discovered by NSA

Yesterday's Microsoft Windows patches included a fix for a critical vulnerability in the system's crypto library. A spoofing vulnerability exists in the way Windows CryptoAPI Crypt32.dll validates Elliptic Curve Cryptography ECC certificates. An attacker could exploit the vulnerability by using a...

sheffield.ac.uk Cross Site Scripting vulnerability

Security Researcher raviakp1004 Helped patch 528 vulnerabilities Received 4 Coordinated Disclosure badges Received 4 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting sheffield.ac.uk website and its users. Following...

vilniausskelbimai.lt Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1944 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting vilniausskelbimai.lt website and its users. Following...

amp.newsbomb.gr Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8584 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting amp.newsbomb.gr website and its users. Following coordinat...

opinio.ucl.ac.uk Improper Access Control vulnerability

Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting opinio.ucl.ac.uk website and its users. Following...

groo.co.il Improper Access Control vulnerability

Security Researcher geeknik Helped patch 8562 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting groo.co.il website and its users. Following coordinated an...

ebctrekking.com Improper Access Control vulnerability

Security Researcher geeknik Helped patch 8544 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting ebctrekking.com website and its users. Following coordinat...

maizar.org.ar Cross Site Scripting vulnerability

Security Researcher sido Helped patch 79 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting maizar.org.ar website and its users. Following coordinated and responsible vulnerability...

pretapousser.fr Improper Access Control vulnerability

Security Researcher SkyEmie Helped patch 53 vulnerabilities Received 2 Coordinated Disclosure badges Received 4 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting pretapousser.fr website and its users. Following coordinated...

presskiosk.ru Cross Site Scripting vulnerability

Security Researcher VighneshGupta Helped patch 131 vulnerabilities Received 3 Coordinated Disclosure badges Received 2 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting presskiosk.ru website and its users. Following...

floridaorthosurgeons.com Cross Site Scripting vulnerability

Security Researcher VighneshGupta Helped patch 131 vulnerabilities Received 3 Coordinated Disclosure badges Received 2 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting floridaorthosurgeons.com website and its users...

[R1] SimpleSAMLPHP Stand-alone Patch Available for Tenable.sc versions 5.9.x to 5.12.x

Tenable.sc leverages third-party software to help provide underlying functionality. One of the third-party components SimpleSAMLPHP was found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with good practice, Tenable opted to...

coffeepointonline.it Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1061930 Security Researcher Gh05tPT Helped patch 6900 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting coffeepointonline.it...

medienstelle.uni-bremen.de Cross Site Scripting vulnerability

Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting medienstelle.uni-bremen.de website and its users...

Mean Time to Hardening: The Next-Gen Security Metric

On average, it takes an organization 15 times longer to close a vulnerability than it does for attackers to weaponize and exploit one. Seven days to weaponize and 102 days to patch. Let that sink in. Once a vulnerability is disclosed, it’s you against them in a race to either secure or exploit; a...

deccofelt.com Cross Site Scripting vulnerability

Security Researcher howardpotts Helped patch 160 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting deccofelt.com website and its users. Following coordinated and responsible...

tronchesettrombines.hautetfort.com Cross Site Scripting vulnerability

Security Researcher MrRain1996 Helped patch 907 vulnerabilities Received 4 Coordinated Disclosure badges Received 9 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting tronchesettrombines.hautetfort.com website and its users...