194 matches found
redbiblioucacue.com Cross Site Scripting vulnerability OBB-1235627
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
detouteslescouleurs.com Cross Site Scripting vulnerability OBB-1211539
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
A zero-day guide for 2020: Recent attacks and advanced preventive techniques
Zero-day vulnerabilities enable threat actors to take advantage of security blindspots. Typically, a zero-day attack involves the identification of zero-day vulnerabilities, creating relevant exploits, identifying vulnerable systems, and planning the attack. The next steps are infiltration and...
tendenzias.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1135776 Security Researcher ianf0ns3c Helped patch 26 vulnerabilities Received 1 Coordinated Disclosure badges Received 3 recommendations , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting tendenzias.com website and...
pooldesign.gr Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8525 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting pooldesign.gr website and its users. Following coordinated...
songspkweb.com Cross Site Scripting vulnerability
Security Researcher AmineChabik Helped patch 42 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting songspkweb.com website and its users. Following coordinated and responsible...
utcle.org Cross Site Scripting vulnerability
Security Researcher g0bl1nsec Helped patch 3608 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting utcle.org website and its users. Following coordinated an...
Imgur: De-anonymization Attack: Cross Site Information Leakage
Dear Imgur Security Team, We are researchers at the IMDEA Software Institute in Madrid, Spain. We have been working on analyzing Cross-Site Browser Leaks xsleaks and building a tool for finding instances of it on target web sites. Recently we tested imgur.com and discovered a flaw that can affect...
gr.thepurchasingjob.com Cross Site Scripting vulnerability
Security Researcher garletmarco Helped patch 1540 vulnerabilities Received 4 Coordinated Disclosure badges , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting gr.thepurchasingjob.com website and its users. Following coordinated and responsib...
sirma.com Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8544 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting sirma.com website and its users. Following coordinated and...
4 Common Misconceptions About Threat Hunting
Editor’s Note: Sam Bocetta, a guest author on the Carbon Black blog, is a freelance journalist specializing in U.S. diplomacy and national security, with emphases on technology trends in cyber warfare, cyber defense, and cryptography. Looking for cyber threats isn't new, but threat hunting as a...
Telenor.com.pk SMS 2-Factor Bypass
Title: Telenor.com.pk Connect Account SMS PIN Redirection Author: Muhammad Shahbaz LinkedIn: https://www.linkedin.com/in/mr-muhammad-shahbaz/ Found: 2019-04-01 Attack Pattern: Telenor.com.pk Connect Account has a fundamental design flaw where the client can send a random telenor phone number...
New Zealand Tragedy-Related Scams and Malware Campaigns
In the wake of the recent New Zealand mosque shootings, the Cybersecurity and Infrastructure Security Agency CISA advises users to watch out for possible malicious cyber activity seeking to capitalize on this tragic event. Users should exercise caution in handling emails related to the shootings,...
grafiaplzen.net XSS vulnerability
Open Bug Bounty ID: OBB-697481 Description| Value ---|--- Affected Website:| grafiaplzen.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
deepnature.com XSS vulnerability
Open Bug Bounty ID: OBB-691609 Description| Value ---|--- Affected Website:| deepnature.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
Facebook Fined £500,000 for Cambridge Analytica Data Scandal
Facebook has finally been slapped with its first fine of £500,000 for allowing political consultancy firm Cambridge Analytica to improperly gather and misuse data of 87 million users. The fine has been imposed by the UK's Information Commissioner's Office ICO and was calculated using the UK's old...
National Cybersecurity Awareness Month: Careers in Cybersecurity
October is National Cybersecurity Awareness Month, an annual campaign to raise awareness about cybersecurity. The month’s themes educate students and professionals about cybersecurity attack methods, best practices, and preventive measures and are geared toward informing the next generation of...
pintastic.co XSS vulnerability
Open Bug Bounty ID: OBB-655418 Description| Value ---|--- Affected Website:| pintastic.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
wellsoon.in XSS vulnerability
Open Bug Bounty ID: OBB-655216 Description| Value ---|--- Affected Website:| wellsoon.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
hausschuh.com XSS vulnerability
Open Bug Bounty ID: OBB-646153 Description| Value ---|--- Affected Website:| hausschuh.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...