Input validation

Improper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker's actions not being logged in the audit log...

curriculum.rsdmo.org XSS vulnerability

Open Bug Bounty ID: OBB-662721 Description| Value ---|--- Affected Website:| curriculum.rsdmo.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Sensitive data on 31,000 GoDaddy servers exposed online

By Waqas All thanks to Unsecure AWS S3 Bucket. GoDaddy is the latest victim of cybercriminals and has joined the league of companies that got confidential data leaked due to unsecure Amazon S3 buckets. The world’s leading domain name registering platform, GoDaddy, boasts of more than 18m customer...

reversedbuying.com XSS vulnerability

Open Bug Bounty ID: OBB-662419 Description| Value ---|--- Affected Website:| reversedbuying.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

immobiliensektor.ch XSS vulnerability

Open Bug Bounty ID: OBB-661287 Description| Value ---|--- Affected Website:| immobiliensektor.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

neelimamarriage.com XSS vulnerability

Open Bug Bounty ID: OBB-661247 Description| Value ---|--- Affected Website:| neelimamarriage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

produktinfo.conrad.com XSS vulnerability

Open Bug Bounty ID: OBB-661156 Description| Value ---|--- Affected Website:| produktinfo.conrad.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

TSMC Chip Maker Blames WannaCry Malware for Production Halt

Taiwan Semiconductor Manufacturing Company TSMC—the world's largest makers of semiconductors and processors—was forced to shut down several of its chip-fabrication factories over the weekend after being hit by a computer virus. Now, it turns out that the computer virus outbreak at Taiwan chipmake...

lesmediatheques-rennesmetropole.fr XSS vulnerability

Open Bug Bounty ID: OBB-659454 Description| Value ---|--- Affected Website:| lesmediatheques-rennesmetropole.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Reddit Hacked – Emails, Passwords, Private Messages Stolen

Another day, another significant data breach. This time the victim is Reddit... seems someone is really pissed off with Reddit's account ban policy or bias moderators. Reddit social media network today announced that it suffered a security breach in June that exposed some of its users' data,...

eatout.co.ke XSS vulnerability

Open Bug Bounty ID: OBB-656338 Description| Value ---|--- Affected Website:| eatout.co.ke Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

KICKICO Hacked: Cybercriminal Steals $7.7 Million from ICO Platform

Again some bad news for cryptocurrency users. KICKICO, a blockchain-based initial coin offering ICO support platform, has fallen victim to a suspected cyber attack and lost more than 70 million KICK tokens or KickCoins worth an estimated $7.7 million. In a statement released on its Medium post on...

learnalberta.ca XSS vulnerability

Open Bug Bounty ID: OBB-654822 Description| Value ---|--- Affected Website:| learnalberta.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ICO hacked: Hackers steal $8 million from KICKICO Blockchain network

By Waqas Another day, another ICO hacked. This time, KICKICO, an Initial Coin Offering ICO project that lets users conduct ICOs, pre-ICOs, crowdfunding and crowdinvesting campaigns have suffered a security breach and as a result, hackers have stolen more than 70 million KickCoins which is around...

Logical Design Vulnerabilities in Jiangsu Jinzhi Education Unified Identity Authentication System

Jiangsu Jinzhi Education Information Co., Ltd. is a well-known provider of informatization services for colleges and universities in China. There is a logical design vulnerability in the Jiangsu Jinzhi Education Unified Identity Authentication System, which can be exploited by an attacker to rese...

Don't let your factory plant become the next cybersecurity victim

In 2014, a smart refrigerator had been caught red-handed for spawning over 750,000 spam emails after hijacked by a botnet attack. It is the first documented attack worldwide for Internet of Things to have fallen prey to hackersi. A more recent case in the US concerns an internet connected...

iPhone Hacking Campaign Using MDM Software Is Broader Than Previously Known

India-linked highly targeted mobile malware campaign, first unveiled two weeks ago, has been found to be part of a broader campaign targeting multiple platforms, including windows devices and possibly Android as well. As reported in our previous article, earlier this month researchers at Talos...

adac-motorsport.de XSS vulnerability

Open Bug Bounty ID: OBB-650813 Description| Value ---|--- Affected Website:| adac-motorsport.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Human Resources Firm ComplyRight Breached

Cloud-based human resources company ComplyRight said this week that a security breach of its Web site may have jeopardized sensitive consumer information -- including names, addresses, phone numbers, email addresses and Social Security numbers -- from tax forms submitted by the company's thousand...

eracaribbean.com XSS vulnerability

Open Bug Bounty ID: OBB-650449 Description| Value ---|--- Affected Website:| eracaribbean.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...