1400 matches found
Now Launching: SOTI?Phishing For Finance
It's that time again -- the launch of the second State of the Internet / Security report of 2021. While Akamai has access to some of the largest security data sets in the world, our viewpoint is limited to the traffic that traverses our networks and is seen by our tools...
Juniper Junos OS Vulnerability (JSA11118)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11118 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network Security, Inc...
xorg-server -- Input validation failures in X server XInput extension
X.Org server security reports for release 1.20.11: Fix XChangeFeedbackControl request underflow...
Fixed in Apache Tomcat 9.0.43
Note: The issues below were fixed in Apache Tomcat 9.0.42 but the release vote for the 9.0.42 release candidate did not pass. Therefore, although users must download 9.0.43 to obtain a version that includes a fix for these issues, version 9.0.42 is not included in the list of affected versions...
OpenMage: No Limit on Email Subscription
Summary: Hello Madison As I have Found a Business Logic Error which cause unlimited amount of Newsletter Subscription as you can see in the image i have provided Steps To Reproduce: 1. Open Burpsuite and set the proxy and intercept on. 2.Then Go to https://demo.openmage.org/ and enter the Email y...
OSV-2018-92 Use-of-uninitialized-value in _gnutls_x509_get_time
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10125 Crash type: Use-of-uninitialized-value Crash state: gnutlsx509gettime gnutlsx509crtgetexpirationtime gnutlscheckcertsanity...
OSV-2017-17 Use-of-uninitialized-value in QuickOpen::Seek
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4522 Crash type: Use-of-uninitialized-value Crash state: QuickOpen::Seek Archive::Seek QuickOpen::Load...
NICER Protocol Deep Dive: Internet Exposure of etcd
Welcome to the NICER Protocol Deep Dive blog series! When we started researching what all was out on the internet way back in January, we had no idea we'd end up with a hefty, 137-page tome of a research report. The sheer length of such a thing might put off folks who might otherwise learn a thin...
Stripo Inc: Non-revoked API Key Disclosure in a Disclosed API Key Disclosure Report on Stripo
Summary: Can you imagine discovering an API key disclosure vulnerability in a disclosed API key disclosure report? The same thing is what I came across while going through the disclosed reports at Stripo Inc. Plus, the disclosed API key isn't even revoked, and therefore I am still able to use the...
nait.kr Cross Site Scripting vulnerability OBB-1496090
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
actoprim.manurevasolutions.com Cross Site Scripting vulnerability OBB-1486079
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
librairiedumau.fr Cross Site Scripting vulnerability OBB-1485496
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
affaireinthegardens.org Cross Site Scripting vulnerability OBB-1477228
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
www1.bidq.co.kr Cross Site Scripting vulnerability OBB-1475986
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
thequiz.zone Cross Site Scripting vulnerability OBB-1467422
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
marjanwaanders.nl Cross Site Scripting vulnerability OBB-1458999
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
dogclub.hu Cross Site Scripting vulnerability OBB-1457571
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
wrc2017.rogaining.lv Cross Site Scripting vulnerability OBB-1457488
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
jiiblove.kr Cross Site Scripting vulnerability OBB-1456761
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Holiday Shopping Craze, COVID-19 Spur Retail Security Storm
As online retailers prepare for the upcoming holiday shopping season, security researchers are warning that cybercriminals will be on the prowl this year, with the added factor of the coronavirus pandemic pushing many Black Friday shoppers online. Chris Eng, chief research officer with Veracode,...