pisauniversitypress.it XSS vulnerability

Open Bug Bounty ID: OBB-583607 Description| Value ---|--- Affected Website:| pisauniversitypress.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cabinet of Secret Documents from Australia

This story of leaked Australian government secrets is unlike any other I've heard: It begins at a second-hand shop in Canberra, where ex-government furniture is sold off cheaply. The deals can be even cheaper when the items in question are two heavy filing cabinets to which no-one can find the...

local.madison-press.com XSS vulnerability

Open Bug Bounty ID: OBB-550478 Description| Value ---|--- Affected Website:| local.madison-press.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Powered by OwnLocal Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

aurovillepress.com XSS vulnerability

Open Bug Bounty ID: OBB-541670 Description| Value ---|--- Affected Website:| aurovillepress.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

aero-expo.com XSS vulnerability

Open Bug Bounty ID: OBB-440381 Description| Value ---|--- Affected Website:| aero-expo.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

Razer US: Reflected XSS on https://press.razerzone.com

The researcher discovered a post reflected XSS on press.razerzone.com that allowed the delivery of a script payload via Firefox and demonstrated via a video. This was reported on 11/27 and deployed to production on 12/27...

press-files.anu.edu.au XSS vulnerability

Open Bug Bounty ID: OBB-437675 Description| Value ---|--- Affected Website:| press-files.anu.edu.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

press-booksweb.uchicago.edu Open Redirect vulnerability

Open Bug Bounty ID: OBB-399603 Description| Value ---|--- Affected Website:| press-booksweb.uchicago.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Gaza Cybergang – updated activity in 2017:

1. Summary information The Gaza cybergang is an Arabic-language, politically-motivated cybercriminal group, operating since 2012 and actively targeting the MENA Middle East North Africa region. The Gaza cybergang's attacks have never slowed down and its typical targets include government...

link.westernfarmpress.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-355456 Description| Value ---|--- Affected Website:| link.westernfarmpress.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Security Flaws in Children's Smart Watches

The Norwegian Consumer Council has published a report detailing a series of security and privacy flaws in smart watches marketed to children. Press release. News article. This is the same group that found all those security and privacy vulnerabilities in smart dolls. EDITED TO ADD 10/21: Slashdot...

WordPress Influencer Marketing And Press Release System 2.2 XSS Vulnerability

Exploit for php platform in category web applications Credit Ricardo Sanchez Vulnerable Influencer Marketing & Press Release System plugin 2.2 Influencer Marketing & Press Release System plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplie...

press-media.stanford.edu Open Redirect vulnerability

Vulnerable URL: http://press-media.stanford.edu/crowds/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclos...

grekaengineering.com XSS vulnerability

Vulnerable URL: http://www.grekaengineering.com/en/investorpressdetails.php?id=13'"65 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| N...

hydraulicspressindia.com XSS vulnerability

Vulnerable URL: http://hydraulicspressindia.com/details.php?cid=hack%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated V...

pia.ca.gov XSS vulnerability

Open Bug Bounty ID: OBB-289707 Description| Value ---|--- Affected Website:| pia.ca.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Beware of Security by Press Release

On Wednesday, the security industry once again witnessed an all-too-familiar cycle: I call it "security by press release." It goes a bit like this: A security firm releases a report claiming to have unearthed a major flaw in a competitor's product; members of the trade press uncritically republis...

vernonpress.com XSS vulnerability

Vulnerable URL: https://vernonpress.com/title.php?id=18"head...

Server-Side Request Forgery (SSRF)

WordPress is vulnerable to server-side request forgery SSRF attacks. The attacks exist because it bypasses the validation of GET request by using URL http://xxx.xxx.xxx.xxx/wp-admin/press-this.php?u=URLTOSCRAPE&url-scan-submit;=Scan which has a zero value in the first octet of an IPv4 address in...

Meet with Wallarm at BlackHat USA 2017

Meet Wallarm team at BlackHat USA 2017 Start your day with a good cup of coffee and a hearty breakfast at PRESS lounge. Join Wallarm team for breakfast on the last day of BlackHat conference. Meet and network with like-minded white hat security professionals while fueling up for another day of...