seattle-theatre.com XSS vulnerability

Open Bug Bounty ID: OBB-360963 Description| Value ---|--- Affected Website:| seattle-theatre.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

autos.seattletimes.com XSS vulnerability

Vulnerable URL: https://autos.seattletimes.com/places/search/type:3/maxprice:0/maxmiles:0/make:0/model:0/services:Tire+&+xss%22%3E%3Cimg%20src=x%20onerror=prompt%22openbugbounty%22%3E/dealer:0/city:0/year:0/bodystyle:0 Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

joyseattle.com XSS vulnerability

Vulnerable URL: http://www.joyseattle.com/paper/main.php?papercode=1/-///'/"//--...

www1.seattleartmuseum.org XSS vulnerability

Open Bug Bounty ID: OBB-250539 Description| Value ---|--- Affected Website:| www1.seattleartmuseum.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

seattlecentral.edu XSS vulnerability

Vulnerable URL: http://seattlecentral.edu/sos/'/ Details: Description| Value ---|--- Patched:| Yes, at 10.05.2017 Latest check for patch:| 10.05.2017 18:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 60189 VIP website status:| No Check seattlecentral.edu SSL...

uniongrouprealty.com XSS vulnerability

Vulnerable URL: http://www.uniongrouprealty.com/index.php?advanced=1=North+Seattle%2C+%5B%5D=area%3ANorth+Seattle=%5B%5D=1=0=100000000=0=0=0=30000=0=3000=0=0==KNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:...

catalog.seattleu.edu XSS vulnerability

Vulnerable URL: http://catalog.seattleu.edu/portfolionopop.php/"--!" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description|...

classifieds.seattletimes.com XSS vulnerability

Vulnerable URL: http://classifieds.seattletimes.com/wa/all-categories/search?searchtype=advancedsearchkeyword=OPENBUGBOUNTY'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

seattle-parks.budget.socrata.com XSS vulnerability

Vulnerable URL: http://seattle-parks.budget.socrata.com/embed/barchart?branchtype=opexentity=null=defaultentity=org1field=total=desc=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...

seattleorthodontist.com XSS vulnerability

Vulnerable URL: https://seattleorthodontist.com/wp-content/plugins/widgetkit/widgets/mediaplayer/mediaelement/flashmediaelement.swf?jsinitfu%xnction=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability...

seattletours.us XSS vulnerability

Vulnerable URL: http://www.seattletours.us/?z=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:55 GMT Vulnerability type:| XSS Vulnerability...

Silk Road 2.0 Dark-Web Admin Pleads Guilty

An admin of Silk Road 2, named Brian Farrell, who helped maintain the notorious dark web site by providing customer and technical support, approving and suspending vendors, and promoting staff members, has pleaded guilty and could face 8 years in prison. The 28-year-old man, who used the moniker...

Hack Disarms SimpliSafe's Home Wireless Security Systems

More than a quarter million homes protected by SimpliSafe wireless security systems are vulnerable to hackers who can deactivate the alarm anytime, according to IOActive, a Seattle-based security consulting firm. IOActive published a proof of concept report on Wednesday that outlines how it...

seattletennisclub.org XSS vulnerability

Vulnerable URL: https://www.seattletennisclub.org/resetpassword.aspx Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3016329 Google Pagerank| 3 VIP website status:| No Check...

Seattle Lab Mail 5.5 - POP3 Buffer Overflow

No description provided by source. $Id: seattlelabpass.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Team Ghostshell Allegedly Dumps 1.6 M Aerospace, Nanotechnology Records

Hacktivist collective Team Ghostshell is claiming this morning to have spilled 1.6 million accounts from a handful of companies in the aerospace, nanotechnology, banking, law, education and government realm, a hack the group deems Project White Fox. The group claims White Fox is its “final stand”...

Terry McCorkle

Terry McCorkle, a Seattle-based researcher presented the results of an independent study on Supervisory Control and Data Acquisition Systems SCADA and Industrial Control Systems ICS where he and his research partner Billy Rios attempted to find 100 bugs in 100 days. They wound up finding 1000+ bu...

University of Washington Vulnerable and Database Leaked by Hacker

University of Washington Vulnerable and Database Leaked by Hacker A few days back, a Team INTRA member hacked into the University of Washington database and released much data. Today, N0B0DY and N0LIFE hacked into it again, releasing the most recent passwords on Pastebin. The root MySQL password...

Phishers Bait City Workers in Seattle With Phony Speeding Tickets

Hundreds of government employees in Seattle, Washington received fraudulent emails yesterday that appeared to be traffic violation notifications but were, in fact, vehicles for infection by malicious software. According to the Microsoft Malware Protection Center and the Seattle Police Department,...

India's CBI plans to send teams to US, Europe to trace hackers !

Against the backdrop of the attack on its website by "Pakistan Cyber Army", the CBI is considering to send its team to the US and Europe to trace hackers involved in the defacement. Sources said the agency officials have pin-pointed three Internet Protocol IP address -- a unique numerical label...